Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
manageengine desktop central vulnerabilities and exploits
(subscribe to this query)
10
CVSSv3
CVE-2017-7213
Zoho ManageEngine Desktop Central before build 100082 allows remote malicious users to obtain control over all connected active desktops via unspecified vectors.
Zohocorp Manageengine Desktop Central -
5.3
CVSSv3
CVE-2022-23779
Zoho ManageEngine Desktop Central prior to 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.
Zohocorp Manageengine Desktop Central
2 Github repositories
NA
CVE-2014-5005
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) prior to 9 build 90055 allows remote malicious users to execute arbitrary code via a .. (dot dot) in the fileName parameter in an LFU action to statusUpdate.
Zohocorp Manageengine Desktop Central
2 EDB exploits
8.8
CVSSv3
CVE-2022-48362
Zoho ManageEngine Desktop Central and Desktop Central MSP prior to 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker...
Zohocorp Manageengine Desktop Central
NA
CVE-2014-9371
The NativeAppServlet in ManageEngine Desktop Central MSP prior to 90075 allows remote malicious users to execute arbitrary code via a crafted JSON object.
Zohocorp Manageengine Desktop Central
6.5
CVSSv3
CVE-2020-10859
Zoho ManageEngine Desktop Central prior to 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.
Zohocorp Manageengine Desktop Central
9.8
CVSSv3
CVE-2017-11346
Zoho ManageEngine Desktop Central before build 100092 allows remote malicious users to execute arbitrary code via vectors involving the upload of help desk videos.
Zohocorp Manageengine Desktop Central
1 EDB exploit
9.1
CVSSv3
CVE-2020-28050
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server.
Zohocorp Manageengine Desktop Central
6.5
CVSSv3
CVE-2022-23863
Zoho ManageEngine Desktop Central prior to 10.1.2137.10 allows an authenticated user to change any user's login password.
Zohocorp Manageengine Desktop Central
8.8
CVSSv3
CVE-2021-46164
Zoho ManageEngine Desktop Central prior to 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module.
Zohocorp Manageengine Desktop Central
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »