Zohocorp

Manageengine Desktop Central

48 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-4769

  • EPSS 0.09%
  • Published 03.11.2023 11:15:08
  • Last modified 21.11.2024 08:35:56

A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, ...

6.1

CVE-2023-4768

  • EPSS 0.68%
  • Published 03.11.2023 11:15:08
  • Last modified 21.11.2024 08:35:56

A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName para...

6.1

CVE-2023-4767

  • EPSS 0.68%
  • Published 03.11.2023 11:15:08
  • Last modified 21.11.2024 08:35:56

A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName para...

8.8

CVE-2022-48362

Exploit
  • EPSS 1.3%
  • Published 25.02.2023 21:15:10
  • Last modified 11.03.2025 21:15:39

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central...

5.3

CVE-2022-23779

  • EPSS 43.57%
  • Published 02.03.2022 15:15:08
  • Last modified 21.11.2024 06:49:15

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.

6.5

CVE-2022-23863

  • EPSS 2.95%
  • Published 28.01.2022 16:15:08
  • Last modified 21.11.2024 06:49:23

Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password.

9.1

CVE-2021-44757

  • EPSS 38.57%
  • Published 18.01.2022 10:15:08
  • Last modified 21.11.2024 06:31:31

Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.

6.5

CVE-2021-46166

  • EPSS 0.31%
  • Published 10.01.2022 14:11:32
  • Last modified 21.11.2024 06:33:43

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page.

7.8

CVE-2021-46165

  • EPSS 0.1%
  • Published 10.01.2022 14:11:32
  • Last modified 21.11.2024 06:33:43

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined.

8.8

CVE-2021-46164

  • EPSS 9.82%
  • Published 10.01.2022 14:11:31
  • Last modified 21.11.2024 06:33:43

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module.