CVE-2022-23779: Zohocorp ManageEngine Desktop Central

Medium severity, CVSS 5.3. EPSS: 15.1% chance of exploitation in the next 30 days.

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.

Affected products

• Zohocorp ManageEngine Desktop Central: before 10.1.2137.8 (fixed in 10.1.2137.8)

Published 2022-03-02. Last modified 2026-06-17.