manageengine_desktop_central 漏洞

中危CVE-2022-237792022/03/02

Zoho ManageEngine - Internal Hostname Disclosure

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.

manageengine_desktop_centralPoC 已收录

CVSS5.3EPSS 70.9%

严重CVE-2021-445152021/12/12KEV

Zoho ManageEngine Desktop Central - Remote Code Execution

Zoho ManageEngine Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.

manageengine_desktop_centralPoC 已收录EXP 已收录

CVSS9.8EPSS 94.3%

严重CVE-2020-101892020/03/06

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution.

manageengine_desktop_centralPoC 已收录RCE

CVSS9.8EPSS 94.2%

高危CVE-2014-50052014/10/21

CVE-2014-5005

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter in an LFU action to statusUpdate.

manageengine_desktop_centralRCE

CVSS7.5EPSS 85.8%

manageengine_desktop_central

关联漏洞

Zoho ManageEngine - Internal Hostname Disclosure

Zoho ManageEngine Desktop Central - Remote Code Execution

ManageEngine Desktop Central Java Deserialization

CVE-2014-5005