ZohoCorp ManageEngine Desktop Central 9.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_desktop_central:9.1.0:*:*:*:*:*:*:*
part: a version: 9.1.0 update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Desktop Central (6a1cca81-16c4-574c-b050-3b264b96d8b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4769 |
vulnerable | 2026-06-08 06:16:14.528736 |
Server-Side Request Forgery in ManageEngine Desktop Central
MEDIUM (6.6)
A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.
Published: 2023-11-03T10:55:13.914Z
Updated: 2024-09-05T18:05:51.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4768 |
vulnerable | 2026-06-08 06:16:14.526900 |
Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central
MEDIUM (6.1)
A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.pdf.
Published: 2023-11-03T10:42:59.426Z
Updated: 2024-09-05T13:59:05.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4767 |
vulnerable | 2026-06-08 06:16:14.526280 |
Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central
MEDIUM (6.1)
A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.
Published: 2023-11-03T10:41:24.845Z
Updated: 2024-09-05T13:59:18.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8722 |
vulnerable | 2026-06-08 05:12:06.360212 |
Details available
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026.
Published: 2018-03-15T04:00:00.000Z
Updated: 2024-08-05T07:02:26.127Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.