CVE-2025-11248

Medium · 4.3

CVSS

4.3

EPSS

0.5%

Published

Oct 27, 2025

CISA due date

—

The record

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.

Affected packages

Ecosystem	Package	Introduced	Fixed