Manageengine Desktop Central
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_desktop_central:*:*:*:*:managed_service_providers:*:*:*
part: a version: * update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Desktop Central (6a1cca81-16c4-574c-b050-3b264b96d8b0) |
| Edition | * |
| Language | * |
| Software edition | managed_service_providers |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-48362 |
vulnerable | 2026-06-08 05:51:34.342710 |
Details available
Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)
Published: 2023-02-25T00:00:00.000Z
Updated: 2025-03-11T20:28:51.711Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44515 |
vulnerable | 2026-06-08 05:36:45.953141 |
Details available
Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3.
Published: 2021-12-12T04:04:55.000Z
Updated: 2025-10-21T23:25:22.936Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9371 |
vulnerable | 2026-06-08 05:06:11.519927 |
Details available
The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.
Published: 2014-12-16T18:00:00.000Z
Updated: 2024-08-06T13:40:25.225Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.