CVE-2025-7473 MEDIUM

CVE-2025-7473: XML Injection

Vendor Zohocorp
Product Endpoint Central
Weakness CWE-91 · XML injection
Published October 21, 2025
Last update October 21, 2025
View on NVD All CVEs

CVSS base score

5.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

What the vulnerability does

01Description

Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.

Key dates

02Disclosure timeline

October 21, 2025 CVE published
October 21, 2025 Record updated