Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 14

Export CSV
CVE-2026-85640

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2026-77699

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2026-77698

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2026-3182

Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2024-10203

Agent Arbitrary File Deletion

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2025-5496

Arbitrary File Deletion

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2025-11248

Sensitive Information Logged

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.

CVSS 3.1 · 3.2 Low EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2024-9097

IDOR

ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2025-5494

Privilege Escalation

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central
CVE-2023-6105

ManageEngine Information Disclosure in Multiple Products

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Microsoft Zohocorp
Products
Linux Kernel Windows Manageengine Access Manager Plus and 38 more
CVE-2024-38868

Incorrect Authorization

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Endpoint Central