CVE-2018-13411: Zohocorp ManageEngine Desktop Central

High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days.

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version.

Affected products

• Zohocorp ManageEngine Desktop Central: before 10.0.282 (fixed in 10.0.282)

Published 2018-09-12. Last modified 2026-06-17.