Zohocorp ManageEngine Desktop Central Managed Service Providers vulnerabilities

2 CVEs affecting Zohocorp ManageEngine Desktop Central Managed Service Providers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44757, published 2022-01-18.

More from Zohocorp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-5007, published 2020-01-17. Critical severity, CVSS 9.8. EPSS: 37.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows…
• CVE-2021-44757, published 2022-01-18. Critical severity, CVSS 9.1. EPSS: 24.2% chance of exploitation in the next 30 days. Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP…