← Back

Manageengine Desktop Central Managed Service Providers

manageengine_desktop_central_managed_service_providers

Vendor: Zohocorp • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-44757
1Zohocorp
2Manageengine Desktop Central
Manageengine Desktop Central Managed Service Providers
Jun 17, 2026
Jan 18, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.
CVE-2014-5007
1Zohocorp
2Manageengine Desktop Central
Manageengine Desktop Central Managed Service Providers
Nov 21, 2024
Jan 17, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to writ...Show more
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. (dot dot) in the filename parameter.Show less