ZOHO ManageEngine Desktop Central vulnerabilities
4 known CVE vulnerabilities in ZOHO ManageEngine Desktop Central, translated and rated.
- CVE-2014-5006High
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before version 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter to mdm/mdmLogUploader.
- CVE-2014-5005High
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central before version 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter in an LFU action to statusUpdate.
- CVE-2017-11346Critical
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.
- CVE-2017-7213Critical
Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors.