Zohocorp

Manageengine Desktop Central

48 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2021-44515

Warning Exploit
  • EPSS 94.31%
  • Published 12.12.2021 05:15:07
  • Last modified 14.03.2025 16:49:38

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterpri...

7.5

CVE-2021-37414

  • EPSS 2.22%
  • Published 10.09.2021 15:15:10
  • Last modified 21.11.2024 06:15:06

Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.

7.8

CVE-2020-9367

  • EPSS 0.08%
  • Published 18.03.2021 20:15:13
  • Last modified 21.11.2024 05:40:29

The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is...

9.1

CVE-2020-28050

  • EPSS 1.6%
  • Published 05.03.2021 17:15:13
  • Last modified 21.11.2024 05:22:17

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server.

5.4

CVE-2019-16962

Exploit
  • EPSS 1.96%
  • Published 06.01.2021 17:15:21
  • Last modified 21.11.2024 04:31:25

Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.

9

CVE-2020-24397

  • EPSS 11.26%
  • Published 02.10.2020 20:15:12
  • Last modified 21.11.2024 05:14:44

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer o...

8.1

CVE-2020-15589

  • EPSS 4.36%
  • Published 02.10.2020 20:15:12
  • Last modified 21.11.2024 05:05:48

A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus before 10.1.2119.1. By exploiting this issue, ...

9.8

CVE-2020-15588

  • EPSS 5.98%
  • Published 29.07.2020 18:15:14
  • Last modified 21.11.2024 05:05:48

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer over...

6.5

CVE-2020-10859

  • EPSS 4.32%
  • Published 05.05.2020 21:15:11
  • Last modified 21.11.2024 04:56:14

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.

7.5

CVE-2020-8509

  • EPSS 11%
  • Published 30.03.2020 18:15:12
  • Last modified 21.11.2024 05:38:58

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure.