Login Request a demo
MD
Product
Manageengine Desktop Central
by Zohocorp · last CVE Nov 3, 2023
On CISA KEVExploited in the wild
48
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities48In the news0Timeline
Severity mix
Critical 18High 16Medium 10Low 0
Severity
All severities48Critical18High16Medium10Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Manageengine Desktop Central to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23863
6.5
2%
Jan 28
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password
Affected: before 10.1.2137.10
CVE-2021-46166
6.5
4%
Jan 10
Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page
Affected: before 10.0.662
CVE-2020-10859
6.5
4%
May 5
Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API…
Affected: before 10.0.484
CVE-2023-4768
6.1
3%
Nov 3
A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0
Affected: 9.1.0
CVE-2023-4767
6.1
3%
Nov 3
A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0
Affected: 9.1.0
CVE-2019-15510
6.1
3%
Mar 23
ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration page via the description of a role
Affected: 10.0
CVE-2018-16833
6.1
65%
Sep 21
Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI
Affected: 10.0.271
CVE-2018-8722
6.1
2%
Mar 15
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026
Affected: 9.1.0
CVE-2019-16962
5.4
2%
Jan 6
Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report
Affected: 10.0.430
CVE-2022-23779
5.3
13%
Mar 2
Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone
Affected: before 10.1.2137.8
Showing 10