Zohocorp Desktop Central vulnerabilities

• manageengine desktop central, zohocorp manageengine desktop central +1 more Server-Side Request Forgery in ManageEngine Desktop Central CVE-2023-4769 6.6 MediumNovember 3, 2023
• manageengine desktop central, zohocorp manageengine desktop central +1 more Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central CVE-2023-4768 6.1 MediumNovember 3, 2023
• manageengine desktop central, zohocorp manageengine desktop central +1 more Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central CVE-2023-4767 6.1 MediumNovember 3, 2023
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory... CVE-2022-48362 8.8 HighFebruary 25, 2023
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone.... CVE-2022-23779 Public exploit EPSS 13.2% 5.3 MediumMarch 2, 2022
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any... CVE-2022-23863 6.5 MediumJanuary 28, 2022
• zohocorp manageengine desktop central, manageengine desktop central managed service providers +1 more Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9... CVE-2021-44757 EPSS 24.2% 9.1 CriticalJanuary 18, 2022
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an... CVE-2021-46164 8.8 HighJanuary 9, 2022
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file... CVE-2021-46165 7.8 HighJanuary 9, 2022
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive... CVE-2021-46166 6.5 MediumJanuary 9, 2022
• zoho desktop central, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code... CVE-2021-44515 In KEV EPSS 99.9% 9.8 CriticalDecember 12, 2021
• zohocorp manageengine desktop central Zoho ManageEngine DesktopCentral version 10.1.2119.7 and prior allows anyone to get a valid user... CVE-2021-37414 7.5 HighSeptember 10, 2021
• zohocorp manageengine desktop central The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to... CVE-2020-9367 7.8 HighMarch 18, 2021
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret... CVE-2020-28050 9.1 CriticalMarch 5, 2021
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a... CVE-2019-16962 5.4 MediumJanuary 6, 2021
• zohocorp manageengine desktop central, manageengine remote access plus +1 more A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and... CVE-2020-15589 8.1 HighOctober 2, 2020
• zohocorp manageengine desktop central An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An... CVE-2020-24397 EPSS 15.4% 7.2 HighOctober 2, 2020
• zohocorp manageengine desktop central An issue was discovered in the client side of Zoho ManageEngine Desktop Central before 10.0.533.... CVE-2020-15588 EPSS 12.7% 9.8 CriticalJuly 29, 2020
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes... CVE-2020-10859 6.5 MediumMay 5, 2020
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central allows unauthenticated users to access PDFGenerationServlet,... CVE-2020-8509 EPSS 10.6% 7.5 HighMarch 30, 2020
• zohocorp manageengine desktop central ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on... CVE-2019-15510 6.1 MediumMarch 23, 2020
• zohocorp manageengine desktop central An XML external entity (XXE) vulnerability iin Zoho ManageEngine Desktop Central before the 07... CVE-2020-8540 EPSS 12.8% 9.8 CriticalMarch 11, 2020
• zoho manageengine, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of... CVE-2020-10189 In KEVPublic exploit EPSS 99.9% 9.8 CriticalMarch 6, 2020
• zohocorp manageengine desktop central Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7... CVE-2013-7390 Public exploit EPSS 74.5% 9.8 CriticalJanuary 27, 2020
• zohocorp manageengine desktop central, manageengine desktop central managed service providers +1 more Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop... CVE-2014-5007 Public exploit EPSS 37.3% 9.8 CriticalJanuary 17, 2020
• zohocorp manageengine admanager plus, manageengine adselfservice plus, manageengine desktop central +2 more Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have... CVE-2019-12876 7.3 HighJuly 17, 2019
• zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 more Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper... CVE-2019-12133 7.8 HighJune 18, 2019
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to... CVE-2018-16833 EPSS 65.4% 6.1 MediumSeptember 21, 2018
• zohocorp manageengine desktop central An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10... CVE-2018-13412 7.8 HighSeptember 12, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company... CVE-2018-13411 8.8 HighSeptember 12, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access... CVE-2018-11717 9.8 CriticalJuly 16, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is... CVE-2018-11716 EPSS 14.3% 9.8 CriticalJuly 16, 2018
• zohocorp manageengine desktop central Incorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255... CVE-2018-12999 7.5 HighJune 29, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: network... CVE-2018-5342 7.2 HighApril 18, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing... CVE-2018-5341 9.8 CriticalApril 18, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database... CVE-2018-5340 7.2 HighApril 18, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: insufficient... CVE-2018-5339 9.8 CriticalApril 18, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing... CVE-2018-5338 9.8 CriticalApril 18, 2018
• zohocorp manageengine desktop central An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory... CVE-2018-5337 9.8 CriticalApril 18, 2018
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were... CVE-2018-8722 6.1 MediumMarch 15, 2018
• zohocorp manageengine desktop central Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10... CVE-2017-16924 9.8 CriticalFebruary 19, 2018
• zohocorp desktop central The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build... CVE-2014-7862 Public exploit EPSS 81.0% 9.8 CriticalJanuary 4, 2018
• zohocorp manageengine desktop central Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of... CVE-2015-2560 EPSS 15.2% 9.8 CriticalAugust 2, 2017
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute... CVE-2017-11346 Public exploit EPSS 43.3% 9.8 CriticalJuly 16, 2017
• zohocorp manageengine desktop central Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control... CVE-2017-7213 10.0 CriticalMay 15, 2017
• zohocorp manageengine desktop central Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9... CVE-2014-9331 Public exploit 6.8 MediumFebruary 4, 2015
• zohocorp manageengine desktop central The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to... CVE-2014-9371 EPSS 19.1% 10.0 HighDecember 16, 2014
• zohocorp manageengine desktop central Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055... CVE-2014-5006 Public exploit EPSS 25.1% 7.5 HighOctober 21, 2014
• zohocorp manageengine desktop central Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055... CVE-2014-5005 Public exploit EPSS 77.8% 7.5 HighOctober 21, 2014