Vulnerability · Published Oct 27, 2025 · Assigned by Zohocorp
CVE-2025-11248Sensitive Information Logged
Low 3.2
In plain English
A low-severity sensitive data in logs in ManageEngine Endpoint Central from Zohocorp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)3.2Low
Exploit odds (30 days)0.5%top 55.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | ManageEngine Endpoint Central | 0 – before 11.4.2528.05 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N