Known vulnerabilities in Zoho ManageEngine Desktop Central - page 2

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_desktop_central:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 8
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zoho ManageEngine Desktop Central Zoho ManageEngine Desktop Central is affected by 33 known vulnerabilities: 13 high, 10 medium, 10 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28256 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-8540
CWE-611 Medium
No
No
10.0.479 26.05.2020 SB2020031142
#VU28254 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
10.0.516 26.05.2020 SB2020052613
#VU28252 - Improper Access Control
CWE-284 Low
No
No
10.0.527 26.05.2020 SB2020052613
#VU28251 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
10.0.528 26.05.2020 SB2020052613
#VU27564 - Unrestricted Upload of File with Dangerous Type
CVE-2020-10859
CWE-434 Medium
No
No
10.0.484 06.05.2020 SB2020050610
#VU26477 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8509
CWE-200 Medium
No
No
- 31.03.2020 SB2020033114
#VU25811 - Deserialization of Untrusted Data
CVE-2020-10189
CWE-502 High
Available
Exploited
10.0.513 06.03.2020 SB2020030610
#VU25638 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
10.0.474 27.02.2020 SB2020022701
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938
CWE-22 High
Available
Exploited
10.0.478, 10.0.512 21.02.2020 SB2020022111
SB2020031401
SB2020031402
and 31 more
#VU15152 - Improper Access Control
CVE-2018-13411
CWE-284 Low
No
No
10.0.282 03.10.2018 SB2018091205
#VU15151 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
10.0.289 03.10.2018 SB2018100303
#VU14917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16833
CWE-79 Low
Available
No
10.0.288 27.09.2018 SB2018092110
#VU14061 - Improper Access Control
CVE-2018-12999
CWE-284 Low
No
No
10.0.288 16.07.2018 SB2018072709


Showing elements 21 - 40 out of 33