Skip to content

Product

ManageEngine EndPoint Central vulnerabilities

4 published CVES affecting ManageEngine EndPoint Central, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
2
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest ManageEngine EndPoint Central CVEs

Newest publication first

  1. CVE-2024-9097 IDOR

    Published
    MediumCVSS 4.3 EPSS 0.72%

    ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.

  2. CVE-2024-10203 Agent Arbitrary File Deletion

    Published
    HighCVSS 7.8 EPSS 0.45%

    Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines.

  3. CVE-2024-38868 Incorrect Authorization

    Published
    HighCVSS 8.3 EPSS 0.80%

    Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

  4. CVE-2024-38869 Incorrect Authorization

    Published
    MediumCVSS 5.4 EPSS 1.1%

    Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.