1. Home
  2. CVE Database
  3. CVE-2025-11248
LOW · 3.2

CVE-2025-11248

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain th...

Vulnerability Description

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.

CVSS Score

3.2

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ZohocorpManageengine Endpoint Central< 11.4.2528.05

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2025-11248?

CVE-2025-11248 is a vulnerability with a CVSS score of 3.2 (LOW). ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain th...

How severe is CVE-2025-11248?

CVE-2025-11248 has been rated LOW with a CVSS base score of 3.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-11248?

Check the references section above for vendor advisories and patch information. Affected products include: Zohocorp Manageengine Endpoint Central.