Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_desktop_central_managed_service_providers:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Desktop Central Managed Service Providers (dfb00c66-49d3-5783-8a75-c300b62dcba3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-44757 vulnerable 2026-06-08 05:36:47.478892 Details available
Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.
Published: 2022-01-18T09:21:07.000Z
Updated: 2024-08-04T04:32:13.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5007 vulnerable 2026-06-08 05:05:46.593690 Details available
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. (dot dot) in the filename parameter.
Published: 2020-01-17T21:59:55.000Z
Updated: 2024-08-06T11:34:37.162Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.