Zohocorp

Manageengine Desktop Central

48 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2021-44515

Warnung Exploit
  • EPSS 94.31%
  • Veröffentlicht 12.12.2021 05:15:07
  • Zuletzt bearbeitet 31.10.2025 14:43:19

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterpri...

7.5

CVE-2021-37414

  • EPSS 2.22%
  • Veröffentlicht 10.09.2021 15:15:10
  • Zuletzt bearbeitet 21.11.2024 06:15:06

Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.

7.8

CVE-2020-9367

  • EPSS 0.06%
  • Veröffentlicht 18.03.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:40:29

The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is...

9.1

CVE-2020-28050

  • EPSS 1.6%
  • Veröffentlicht 05.03.2021 17:15:13
  • Zuletzt bearbeitet 21.11.2024 05:22:17

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server.

5.4

CVE-2019-16962

Exploit
  • EPSS 1.96%
  • Veröffentlicht 06.01.2021 17:15:21
  • Zuletzt bearbeitet 21.11.2024 04:31:25

Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.

9

CVE-2020-24397

  • EPSS 14.55%
  • Veröffentlicht 02.10.2020 20:15:12
  • Zuletzt bearbeitet 21.11.2024 05:14:44

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer o...

8.1

CVE-2020-15589

  • EPSS 3.58%
  • Veröffentlicht 02.10.2020 20:15:12
  • Zuletzt bearbeitet 21.11.2024 05:05:48

A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus before 10.1.2119.1. By exploiting this issue, ...

9.8

CVE-2020-15588

  • EPSS 5.98%
  • Veröffentlicht 29.07.2020 18:15:14
  • Zuletzt bearbeitet 21.11.2024 05:05:48

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer over...

6.5

CVE-2020-10859

  • EPSS 4.32%
  • Veröffentlicht 05.05.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 04:56:14

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.

7.5

CVE-2020-8509

  • EPSS 11.97%
  • Veröffentlicht 30.03.2020 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:38:58

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure.