CVE-2025-5496: Arbitrary File Deletion
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ZohoCorp ManageEngine Endpoint Centralto a version that resolves this vulnerability.Fixed in 11.4.2508.14 - Upgrade
Upgrade
ZohoCorp ManageEngine Endpoint Centralto a version that resolves this vulnerability.Fixed in 11.4.2516.06 - Upgrade
Upgrade
ZohoCorp ManageEngine Endpoint Centralto a version that resolves this vulnerability.Fixed in 11.4.2518.01
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5496?
CVE-2025-5496 is rated as a high-severity vulnerability due to its potential for arbitrary file deletion.
How do I fix CVE-2025-5496?
To fix CVE-2025-5496, you should upgrade ZohoCorp ManageEngine Endpoint Central to version 11.4.2508.14 or later.
Which versions of ZohoCorp ManageEngine Endpoint Central are affected by CVE-2025-5496?
CVE-2025-5496 affects versions of ZohoCorp ManageEngine Endpoint Central prior to 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01.
What is the nature of the vulnerability in CVE-2025-5496?
CVE-2025-5496 is an arbitrary file deletion vulnerability found in the agent setup component.
Can CVE-2025-5496 lead to privilege escalation?
Yes, CVE-2025-5496 can allow local privilege escalation due to the arbitrary file deletion capability.