CVE-2025-7473: XML Injection
Published Oct 21, 2025
·Updated
Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
Affected Software
2 affected components
Zohocorp ManageEngine Endpoint Central<11.4.2516.1
Zohocorp ManageEngine Endpoint Central<=11.4.2516.01
Event History
Oct 21, 2025
CVE Published
via MITRE·10:58 AM
Data Sourced
via MITRE·10:58 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-7473?
CVE-2025-7473 is classified as a medium severity vulnerability due to its potential to allow XML injection.
2
How do I fix CVE-2025-7473?
To mitigate CVE-2025-7473, upgrade to versions later than 11.4.2516.1 of Zohocorp ManageEngine EndPoint Central.
3
What versions of Zohocorp ManageEngine EndPoint Central are affected by CVE-2025-7473?
CVE-2025-7473 affects Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and earlier.
4
What attack vectors are associated with CVE-2025-7473?
CVE-2025-7473 can be exploited via XML injection in the parsing of XML data.
5
Who is the vendor for CVE-2025-7473?
The vendor for CVE-2025-7473 is Zohocorp, specifically for their product ManageEngine EndPoint Central.