Manageengine Desktop Central Managed Service Providers CVEs and Security Vulnerabilities

Vulnerabilities (Manageengine Desktop Central Managed Service Providers)

CVE-2021-44757

Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.

CVSS 3.1 · 9.1 Critical EPSS 24.2% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Desktop Central Manageengine Desktop Central Managed Service Providers

CVE-2014-5007

Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. (dot dot) in the filename parameter.

CVSS 3.1 · 9.8 Critical EPSS 37.3% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Desktop Central Manageengine Desktop Central Managed Service Providers

Search vulnerabilities