Sensitive Information Logging Vulnerability in ZohoCorp ManageEngine Endpoint Central

CVE-2025-11248

What is CVE-2025-11248?

ZohoCorp's ManageEngine Endpoint Central, specifically versions prior to 11.4.2528.05, presents a significant security concern due to a sensitive information logging vulnerability. This issue allows an authenticated user with access to the logs to potentially retrieve sensitive agent tokens, which can be exploited to compromise the security posture of the affected system. It is imperative for organizations to identify if they are using an affected version and take necessary actions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References