Desktop central

This hub aggregates every CVE we track for Desktop central, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Desktop central.

• CVE-2023-4769Server-Side Request Forgery in ManageEngine Desktop Central6.6Nov 3, 2023
• CVE-2023-4768Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central6.1Nov 3, 2023
• CVE-2023-4767Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central6.1Nov 3, 2023
• CVE-2021-28960Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations.9.8Sep 21, 2021
• CVE-2014-7862The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.9.8Jan 4, 2018
• CVE-2015-8249The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.9.8Sep 27, 2017
• CVE-2014-3996SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manag...7.5Dec 5, 2014