Manageengine Endpoint Central

manageengine_endpoint_central

Vendor: Zohocorp • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-11248 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Oct 27, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent to...Show more ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.Show less
CVE-2025-7473 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Oct 21, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
CVE-2025-5496 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Oct 21, 2025 N/A· v4 3.3 LOW· v3 N/A· v2 ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
CVE-2025-5494 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Sep 25, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
CVE-2024-9097 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Feb 5, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.
CVE-2024-10203 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Nov 7, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines.
CVE-2024-38868 1Zohocorp 1Manageengine Endpoint Central Jun 17, 2026 Aug 30, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15
CVE-2023-6105 1Zohocorp 39Manageengine Access Manager Plus Manageengine Adaudit PlusManageengine Admanager Plus+36 more Jun 17, 2026 Nov 15, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product i...Show more An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.Show less