MD
Product
Manageengine Desktop Central
On CISA KEVExploited in the wild
48
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 16Medium 10Low 0
Watch
Add Manageengine Desktop Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4769 | 8.8 | Nov 3 | A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component Affected: 9.1.0 |
| CVE-2022-48362 | 8.8 | Feb 25 | Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet Affected: before 10.1.2137.2; before 10.1.2137.2 |
| CVE-2021-46164 | 8.8 | Jan 10 | Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module Affected: before 10.0.662 |
| CVE-2018-13411 | 8.8 | Sep 12 | An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282 Affected: before 10.0.282 |
| CVE-2020-15589 | 8.1 | Oct 2 | A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central… Affected: 10.0.552.w |
| CVE-2021-46165 | 7.8 | Jan 10 | Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined Affected: before 10.0.662 |
| CVE-2020-9367 | 7.8 | Mar 18 | The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without… Affected: 10.0.486 |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 10.0.380 |
| CVE-2018-13412 | 7.8 | Sep 12 | An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282 Affected: before 10.0.282 |
| CVE-2021-37414 | 7.5 | Sep 10 | Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication Affected: before 10.0.709 |
| CVE-2020-8509 | 7.5 | Mar 30 | Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure Affected: before 10.0.483 |
| CVE-2018-12999 | 7.5 | Jun 29 | Incorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255 allows attackers to delete certain files on the web server without login by sending… Affected: 10.0.255 |
| CVE-2019-12876 | 7.3 | Jul 17 | Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to… Affected: 10.0.380 |
| CVE-2020-24397 | 7.2 | Oct 2 | An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534 Affected: 10.0.0 |
| CVE-2018-5342 | 7.2 | Apr 18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: network services (Desktop Central and PostgreSQL) running with a superuser account Affected: 10.0.124; 10.0.184 |
| CVE-2018-5340 | 7.2 | Apr 18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account (specifically, an account with permission to write to… Affected: 10.0.124; 10.0.184 |
Showing 16