CVE-2025-41437

Reflected XSS PUBLISHED

Description (CNA)

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page.

Affected (CNA)

Vendor / product	Versions
ManageEngine / OpManager	affected 0 before 128566

CWE

CWE-79

References

https://www.manageengine.com/itom/advisory/cve-2025-41437.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.