ME
Product
ManageEngine Endpoint Central
13
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 9Low 1
Watch
Add ManageEngine Endpoint Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38868 | 8.3 | Aug 30 | Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and… Affected: before 11.3.2400.15; 11.3.2401.05 before 11.3.2406.08 |
| CVE-2025-5494 | 7.8 | Sep 25 | ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup Affected: before 11.4.2500.26; 11.4.2508.01 before 11.4.2508.14 |
| CVE-2024-10203 | 7.8 | Nov 7 | Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines Affected: through 11.3.2416.21; 11.3.2428.01 through 11.3.2428.09 |
| CVE-2026-77697 | 6.3 | Sep 7 | Privilege Escalation Affected: before 11.4.2540.23 |
| CVE-2026-85640 | 6.3 | Sep 7 | Privilege Escalation Affected: before 11.5.2600.15 |
| CVE-2026-77698 | 5.7 | Sep 7 | Privilege Escalation Affected: before 11.5.2605.01 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 11.2.2322.01 |
| CVE-2025-7473 | 5.3 | Oct 21 | Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection Affected: through 11.4.2516.01 |
| CVE-2026-77699 | 5.0 | Sep 7 | Privilege Escalation Affected: before 11.5.2605.01 |
| CVE-2026-3182 | 4.3 | Jul 21 | Sensitive Data Exposure Affected: before 11.4.2528.34 |
| CVE-2025-11248 | 4.3 | Oct 27 | ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue Affected: before 11.4.2528.05 |
| CVE-2024-9097 | 4.3 | Feb 5 | ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat Affected: 11.3.2428.01 before 11.3.2428.26 |
| CVE-2025-5496 | 3.3 | Oct 21 | ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent… Affected: before 11.4.2508.14; 11.4.2510.01 before 11.4.2516.06 |
Showing 13