CVE-2025-6239: Zohocorp ManageEngine Applications Manager

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor.

Affected products

• Zohocorp ManageEngine Applications Manager: before 17.6 (fixed in 17.6); version 17.6 only

Published 2025-10-21. Last modified 2026-10-08.