« Volver al listado

CVE-2025-9226

Estado: AplazadaMedia (4.6)—

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Zohocorp — Manageengine Netflow AnalyzerAIZohocorp — Manageengine OpmanagerAIZohocorp — Manageengine OputilsAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-9226",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-9226",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-30T14:12:56.097882Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.6,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "affectedData": [
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine OpManager",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "128582",
              "versionType": "128582"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine NetFlow Analyzer",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "128582",
              "versionType": "128582"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine OpUtils",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "128582",
              "versionType": "128582"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-01-30T14:16:06.960",
  "references": [
    {
      "url": "https://www.manageengine.com/itom/advisory/cve-2025-9226.html",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details."
    },
    {
      "lang": "es",
      "value": "Las versiones de Zohocorp ManageEngine OpManager, NetFlow Analyzer y OpUtils anteriores a la 128582 están afectadas por una vulnerabilidad de cross-site scripting almacenado en los Detalles de Subred."
    }
  ],
  "lastModified": "2026-06-17T10:08:33.520",
  "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02"
}