Login Request a demo
DC
Product
Desktop Central
by Manageengine · last CVE Sep 21, 2021
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 0
Severity
All severities3Critical2High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Desktop Central to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-28960
9.8
2%
Sep 21
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations
Affected: before 10.0.683
CVE-2015-8249
9.8
74%
Sep 28
The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter
Affected: 9.0
CVE-2014-3996
–
38%
Dec 5
SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build…
Affected: through 9.0; through 9.0
Showing 3