Vulnerabilities (CVE)

Filtered by vendor Manageengine Subscribe
Filtered by product Desktop Central
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28960 1 Manageengine 1 Desktop Central 2021-11-28 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations.
CVE-2015-8249 1 Manageengine 1 Desktop Central 2017-10-06 10.0 HIGH 9.8 CRITICAL
The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.