Sploitus

18 exploited vulnerabilities in Zoho Manageengine Desktop Central

Vulnerabilities with publicly known exploits

Vendors
Zoho, Manageengine, Postgresql
With known exploits
18
Affected Zohocorp Manageengine Desktop Central versions
< 10.1.2127.18, 10.1.2137.3, 9.0, 10.0.479, 10.0.124, 10.0.184, 100251, 100230, 10.0, 10.0.282, 8.0.0, 10.0.255, 10.0.430, 10.1.2137.8
Affected Zohocorp Manageengine Desktop Central Managed Service Providers versions
≤ 9.0

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2021-44515 1 exploit
CVSS 10.0 CRITICAL 2021-12-04FIX AVAILABLE
SRC-2022-0001 : Zoho ManageEngine Desktop Central StateFilter Arbitrary Forward Authentication Bypass Vulnerability
CVE-2014-5007 7 exploits
CVSS 10.0 HIGH 2020-01-17FIX AVAILABLE
ManageEngine Desktop Central - Arbitrary File Upload / RCEManageEngine Desktop Central - Arbitrary File Upload / RCE Vulnerabilities
CVE-2020-10189 6 exploits
CVSS 10.0 CRITICAL 2020-03-06FIX AVAILABLE
Heyserial - Programmatically Create Hunting Rules For Deserialization Exploitation With Multiple Keywords, Gadget Chains, Object Types, Encodings, And Rule TypesManageEngine Desktop Central - Java Deserialization (Metasploit)
CVE-2018-5341
CVSS 9.8 CRITICAL 2018-04-18FIX AVAILABLE
CVE-2018-5339
CVSS 9.8 CRITICAL 2018-04-18FIX AVAILABLE
CVE-2018-5338
CVSS 9.8 CRITICAL 2018-04-18FIX AVAILABLE
CVE-2018-5337
CVSS 9.8 CRITICAL 2018-04-18FIX AVAILABLE
CVE-2018-11717
CVSS 9.8 CRITICAL 2018-07-16FIX AVAILABLE
CVE-2018-11716
CVSS 9.8 CRITICAL 2018-07-16FIX AVAILABLE
CVE-2017-11346 5 exploits
CVSS 9.8 CRITICAL 2017-07-16FIX AVAILABLE
ManageEngine Desktop Central 10 Build 100087 RCE(CVE-2017-11346)ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution Exploit
CVE-2018-13411
CVSS 9.0 HIGH 2018-09-12FIX AVAILABLE
CVE-2013-7390 8 exploits
CVSS 7.5 HIGH 2020-01-27FIX AVAILABLE
ManageEngine Desktop Central - Arbitrary File Upload / RCEManageEngine Desktop Central - Arbitrary File Upload / RCE Vulnerabilities
CVE-2018-12999 2 exploits
CVSS 7.5 HIGH 2018-06-29FIX AVAILABLE
Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion VulnerabilitiesZoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion
CVE-2018-5342
CVSS 7.2 HIGH 2018-04-18FIX AVAILABLE
CVE-2019-15510
CVSS 6.1 MEDIUM 2020-03-23
CVE-2019-16962
CVSS 5.4 MEDIUM 2021-01-06FIX AVAILABLE
CVE-2022-23779 2 exploits
CVSS 5.3 MEDIUM 2022-03-02FIX AVAILABLE
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Zohocorp Manageengine_Desktop_CentralExploit for Exposure of Sensitive Information to an Unauthorized Actor in Zohocorp Manageengine_Desktop_Central
CVE-2015-2560 2 exploits
CVSS 5.0 MEDIUM 2017-08-02FIX AVAILABLE
Manage Engine Desktop Central 9 Unauthorized Administrative Password Reset VulnerabilityManage Engine Desktop Central 9 Unauthorized Administrative Password Reset