CVE-2021-37414: Zohocorp ManageEngine Desktop Central

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.

Affected products

• Zohocorp ManageEngine Desktop Central: before 10.0.709 (fixed in 10.0.709)

Published 2021-09-10. Last modified 2026-06-17.