ME
Product
ManageEngine Endpoint Central
14
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 10Low 1
Watch
Add ManageEngine Endpoint Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38868 | 8.3 | Aug 30 | Incorrect Authorization Affected: before 11.3.2400.15; 11.3.2401.05 before 11.3.2406.08 |
| CVE-2025-5494 | 7.8 | Sep 25 | Privilege Escalation Affected: before 11.4.2500.26; 11.4.2508.01 before 11.4.2508.14 |
| CVE-2024-10203 | 7.8 | Nov 7 | Agent Arbitrary File Deletion Affected: through 11.3.2416.21; 11.3.2428.01 through 11.3.2428.09 |
| CVE-2026-77697 | 6.3 | Sep 7 | Privilege Escalation Affected: before 11.4.2540.23 |
| CVE-2026-85640 | 6.3 | Sep 7 | Privilege Escalation Affected: before 11.5.2600.15 |
| CVE-2026-77698 | 5.7 | Sep 7 | Privilege Escalation Affected: before 11.5.2605.01 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 11.2.2322.01 |
| CVE-2024-38869 | 5.4 | Aug 23 | Incorrect Authorization Affected: before 11.3.2416.04; before 11.3.2400.25 |
| CVE-2025-7473 | 5.3 | Oct 21 | XML Injection Affected: through 11.4.2516.01 |
| CVE-2026-77699 | 5.0 | Sep 7 | Privilege Escalation Affected: before 11.5.2605.01 |
| CVE-2026-3182 | 4.3 | Jul 21 | Sensitive Data Exposure Affected: before 11.4.2528.34 |
| CVE-2025-11248 | 4.3 | Oct 27 | Sensitive Information Logged Affected: before 11.4.2528.05 |
| CVE-2024-9097 | 4.3 | Feb 5 | ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat. Affected: 11.3.2428.01 before 11.3.2428.26 |
| CVE-2025-5496 | 3.3 | Oct 21 | Arbitrary File Deletion Affected: before 11.4.2508.14; 11.4.2510.01 before 11.4.2516.06 |
Showing 14