CVE-2018-16833: Zohocorp ManageEngine Desktop Central

Medium severity, CVSS 6.1. EPSS: 65.4% chance of exploitation in the next 30 days.

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.

Affected products

• Zohocorp ManageEngine Desktop Central: version 10.0.271 only

Published 2018-09-21. Last modified 2026-06-17.