MD
Product
Manageengine Desktop Central
On CISA KEVExploited in the wild
48
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 16Medium 10Low 0
Watch
Add Manageengine Desktop Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44515 In wildKEV | 9.8 | Dec 12 | Zoho Desktop Central Authentication Bypass Vulnerability Affected: before 10.1.2127.18; before 10.1.2127.18; 10.1.2128.0 before 10.1.2137.3; 10.1.2128.0 before 10.1.2137.3 |
| CVE-2020-10189 In wildKEV | 9.8 | Mar 6 | Zoho ManageEngine Desktop Central File Upload Vulnerability Affected: before 10.0.479 |
| CVE-2017-7213 | 10.0 | May 15 | Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors Affected: All versions, or not specified |
| CVE-2020-15588 | 9.8 | Jul 29 | An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W Affected: before 10.0.561 |
| CVE-2020-8540 | 9.8 | Mar 11 | An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or… Affected: before 2020-03-07 |
| CVE-2013-7390 | 9.8 | Jan 27 | Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code… Affected: 7.0.0 through 8.0.0 |
| CVE-2014-5007 | 9.8 | Jan 17 | Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9… Affected: 7.0 through 9.0 |
| CVE-2018-11717 | 9.8 | Jul 16 | An issue was discovered in Zoho ManageEngine Desktop Central before 100251 Affected: before 100251 |
| CVE-2018-11716 | 9.8 | Jul 16 | An issue was discovered in Zoho ManageEngine Desktop Central before 100230 Affected: before 100230 |
| CVE-2018-5341 | 9.8 | Apr 18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing server-side check on the file type/extension when uploading and modifying scripts Affected: 10.0.124; 10.0.184 |
| CVE-2018-5339 | 9.8 | Apr 18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: insufficient enforcement of database query type restrictions Affected: 10.0.124; 10.0.184 |
| CVE-2018-5338 | 9.8 | Apr 18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing authentication/authorization for a database query mechanism Affected: 10.0.124; 10.0.184 |
| CVE-2018-5337 | 9.8 | Apr 18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPT_NAME field when modifying existing scripts Affected: 10.0.124; 10.0.184 |
| CVE-2017-16924 | 9.8 | Feb 19 | Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for… Affected: 10.0.137 |
| CVE-2015-2560 | 9.8 | Aug 2 | Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to… Affected: 9.0 |
| CVE-2017-11346 | 9.8 | Jul 17 | Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos Affected: through 10.0 |
| CVE-2021-44757 | 9.1 | Jan 18 | Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload… Affected: before 10.1.2137.9 |
| CVE-2020-28050 | 9.1 | Mar 5 | Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server Affected: before 10.0.647 |
Showing 18