CVE-2021-28960

2021-09-2112:46:18

mitre

www.cve.org

zoho manageengine desktop central

command injection

cve-2021-28960

on-demand operations

unauthenticated

AI Score

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON

Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations.

References

www.manageengine.com

www.manageengine.com/products/desktop-central/unauthenticated-command-injection-vulnerability.html