CVE-2025-9223: Command Injection
Published Nov 11, 2025
·Updated
Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.
Affected Software
1 affected component
Zohocorp ManageEngine Applications Manager<=178100
Event History
Nov 11, 2025
CVE Published
via MITRE·01:13 PM
Data Sourced
via MITRE·01:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Feb 28, 57989
Event
via FIRST·07:20 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-9223?
CVE-2025-9223 is classified as a critical vulnerability due to its potential for authenticated command injection.
2
How do I fix CVE-2025-9223?
To fix CVE-2025-9223, update Zohocorp ManageEngine Applications Manager to version 178101 or above.
3
What versions of Zohocorp ManageEngine Applications Manager are affected by CVE-2025-9223?
CVE-2025-9223 affects all versions of Zohocorp ManageEngine Applications Manager up to and including version 178100.
4
What type of vulnerability is CVE-2025-9223?
CVE-2025-9223 is an authenticated command injection vulnerability.
5
What is the potential impact of CVE-2025-9223?
The potential impact of CVE-2025-9223 includes unauthorized execution of commands on the affected system.