Login Request a demo
DC
Product
Desktop Central
by ManageEngine · last CVE Nov 3, 2023
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 1Medium 2Low 0
Severity
All severities6Critical2High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Desktop Central to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-28960
9.8
2%
Sep 21
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations
Affected: before 10.0.683
CVE-2015-8249
9.8
74%
Sep 28
The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter
Affected: 9.0
CVE-2023-4769
8.8
3%
Nov 3
Server-Side Request Forgery in ManageEngine Desktop Central
Affected: 9.1.0
CVE-2023-4768
6.1
3%
Nov 3
Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central
Affected: 9.1.0
CVE-2023-4767
6.1
3%
Nov 3
Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central
Affected: 9.1.0
CVE-2014-3996
–
38%
Dec 5
SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build…
Affected: through 9.0; through 9.0
Showing 6