Manageengine Desktop Central Managed Service Providers vulnerabilities

Product

Manageengine Desktop Central Managed Service Providers

by Zohocorp · last CVE Jan 18, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Manageengine Desktop Central Managed Service Providers to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-5007	9.8	37%	Jan 17	Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9… Affected: 7.0 through 9.0
CVE-2021-44757	9.1	24%	Jan 18	Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload… Affected: before 10.1.2137.9