Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Endpoint Central (1a4f5043-a256-5503-abdb-61fa773ad798)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3182 vulnerable 2026-07-29 00:46:20.081271 Sensitive Data Exposure
MEDIUM (4.3)
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.
Published: 2026-07-21T05:30:33.481Z
Updated: 2026-07-21T15:03:24.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7473 vulnerable 2026-06-08 07:45:17.485979 XML Injection
MEDIUM (5.2)
Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
Published: 2025-10-21T10:58:47.949Z
Updated: 2025-10-21T13:24:38.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5496 vulnerable 2026-06-08 07:37:24.953554 Arbitrary File Deletion
LOW (3.3)
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
Published: 2025-10-21T10:04:08.316Z
Updated: 2025-10-21T13:31:28.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5494 vulnerable 2026-06-08 07:37:24.949292 Privilege Escalation
LOW (3.9)
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
Published: 2025-09-25T13:11:49.423Z
Updated: 2025-09-25T15:15:34.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11248 vulnerable 2026-06-08 07:02:28.471871 Sensitive Information Logged
LOW (3.2)
ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.
Published: 2025-10-27T12:56:35.389Z
Updated: 2025-10-27T15:07:22.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9097 vulnerable 2026-06-08 07:00:26.652331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38869 vulnerable 2026-06-08 06:41:48.526450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38868 vulnerable 2026-06-08 06:41:48.525955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10203 vulnerable 2026-06-08 06:22:03.778516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6105 vulnerable 2026-06-08 06:19:45.625402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.