CVE-2025-5494: Privilege Escalation
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.
This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5494?
CVE-2025-5494 is rated as a medium severity vulnerability due to its potential for privilege escalation.
How does CVE-2025-5494 affect ZohoCorp ManageEngine Endpoint Central?
CVE-2025-5494 affects the agent setup in ZohoCorp ManageEngine Endpoint Central, allowing for improper privilege management.
Which versions of ManageEngine Endpoint Central are affected by CVE-2025-5494?
CVE-2025-5494 impacts ManageEngine Endpoint Central versions up to and including 11.4.2508.13.
How can I mitigate the risks associated with CVE-2025-5494?
To mitigate the risks of CVE-2025-5494, users should update to the latest version of ManageEngine Endpoint Central that addresses this vulnerability.
Is there a patch available for CVE-2025-5494?
Yes, a patch for CVE-2025-5494 is available with updates to ManageEngine Endpoint Central beyond version 11.4.2508.13.