CVE-2025-7473

MediumCVSS 5.3/10Last modified Oct 8, 2026

Description

Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-91

Affected software

No affected versions have been published.

Timeline

Published
Oct 21, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-74749.8A vulnerability was found in code-projects Job Diary 1.0. It has been rated as critical. Affected by this issue is some unknown functionalitCVE-2025-74759.8A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the filCVE-2025-74769.8A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of tCVE-2025-74777.2A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unkCVE-2025-74789.8A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. Affected is an unknown function of the file /aCVE-2025-74798.8A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerabiliCVE-2025-74809.8A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unCVE-2025-74818.8A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown CVE-2025-74828.8A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been declared as critical. This vulnerability affectsCVE-2025-74839.8A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been rated as critical. This issue affects some unknoCVE-2025-74848.8A vulnerability classified as critical has been found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function CVE-2025-74853.3A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_recv_handler
CVE-2025-7473: Medium severity, CVSS 5.3 | Vulnix