Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-3kcs-2q78-jucn
SummaryZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.
Aliases
0
alias CVE-2025-11248
Fixed_packages
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-11248
reference_id
reference_type
scores
0
value 0.00362
scoring_system epss
scoring_elements 0.58645
published_at 2026-06-09T12:55:00Z
1
value 0.00362
scoring_system epss
scoring_elements 0.58652
published_at 2026-06-06T12:55:00Z
2
value 0.00362
scoring_system epss
scoring_elements 0.5863
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-11248
1
reference_url https://www.manageengine.com/products/desktop-central/CVE-2025-11248.html
reference_id CVE-2025-11248.html
reference_type
scores
0
value 3.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-27T15:07:12Z/
url https://www.manageengine.com/products/desktop-central/CVE-2025-11248.html
Weaknesses
0
cwe_id 532
name Insertion of Sensitive Information into Log File
description Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
Exploits
Severity_range_score3.2 - 3.2
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-3kcs-2q78-jucn