CVE-2022-23863: Zohocorp ManageEngine Desktop Central

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password.

Affected products

• Zohocorp ManageEngine Desktop Central: before 10.1.2137.10 (fixed in 10.1.2137.10)

Published 2022-01-28. Last modified 2026-06-17.