Manageengine Endpoint Central (Zohocorp) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 285 known versions, newest CVE from 2026-09-07. Vendor: Zohocorp.
CVEs of Manageengine Endpoint Central
- CVE-2026-77697 - CVSS 6.3 (medium), 2026-09-07: Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction
- CVE-2026-85640 - CVSS 6.3 (medium), 2026-09-07: Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component
- CVE-2026-77699 - CVSS 5 (medium), 2026-09-07: Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.
- CVE-2026-77698 - CVSS 5.7 (medium), 2026-09-07: Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.
- CVE-2026-3182 - CVSS 4.3 (medium), 2026-07-21: Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.
- CVE-2025-11248 - CVSS 4.3 (medium), 2025-10-27: ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with…
- CVE-2025-7473 - CVSS 5.3 (medium), 2025-10-21: Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
- CVE-2025-5496 - CVSS 3.3 (low), 2025-10-21: ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion…
- CVE-2025-5494 - CVSS 7.8 (high), 2025-09-25: ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through…
- CVE-2024-9097 - CVSS 4.3 (medium), 2025-02-05: ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.
- CVE-2024-10203 - CVSS 7.8 (high), 2024-11-07: Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed…
- CVE-2024-38868 - CVSS 8.3 (high), 2024-08-30: Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central:…
- CVE-2024-38869 - CVSS 8.3 (high), 2024-08-23: Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint…
- CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
