CVE-2025-27930: Zohocorp ManageEngine Applications Manager

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.

Affected products

• Zohocorp ManageEngine Applications Manager: before 17.6 (fixed in 17.6); version 17.6 only

Published 2025-07-23. Last modified 2026-06-17.