Vulnerabilidades do Zohocorp Manageengine Endpoint Central

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Zohocorp Manageengine Endpoint Central: 9 registro(s), com versões afetadas e correções.
cpe:2.3:a:zohocorp:manageengine_endpoint_central

CVE-2026-85640 Média · 6.3 CWE-269 07/09/2026

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component

CVE-2026-77699 Média · 5.0 CWE-269 07/09/2026

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.

CVE-2026-77697 Média · 6.3 CWE-269 07/09/2026

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction

CVE-2026-77698 Média · 5.7 CWE-269 07/09/2026

Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.

CVE-2026-3182 Média · 4.3 CWE-319 21/07/2026

Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.

CVE-2025-11248 Média · 4.3 CWE-532 27/10/2025

Sensitive Information Logged

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.

CVE-2025-7473 Média · 5.3 CWE-91 21/10/2025

XML Injection

Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.

CVE-2025-5496 Baixa · 3.3 CWE-269 21/10/2025

Arbitrary File Deletion

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

CVE-2025-5494 Alta · 7.8 CWE-269 25/09/2025

Privilege Escalation

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.