CVE-2019-12133

🗓️ 18 Jun 2019 22:15:12Reported by [email protected]Type

Zoho ManageEngine products have local privilege escalation vulnerability in various versions due to improper permissions and binary execution on system star

Reporter	Title	Published	Views	Family All 8
CNVD	Multiple ZOHO Products License Issue Vulnerabilities	19 Jun 201900:00	–	cnvd
CVE	CVE-2019-12133	18 Jun 201921:27	–	cve
Cvelist	CVE-2019-12133	18 Jun 201921:27	–	cvelist
EUVD	EUVD-2019-3784	7 Oct 202500:30	–	euvd
osv_cve	CVE-2019-12133	18 Jun 201922:15	–	osv_cve
Prion	Design/Logic Flaw	18 Jun 201922:15	–	prion
Positive Technologies	PT-2019-12649	18 Jun 201900:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-12133: Uncontrolled Search Path Element	18 Jun 201900:00	–	rapid7

NVD

Node

zohocorp manageengine_analytics_plusMatch1.0

zohocorp manageengine_browser_security_plusMatch-

zohocorp manageengine_desktop_centralMatch10.0.380

zohocorp manageengine_eventlog_analyzerMatch12.0.2

zohocorp manageengine_firewallMatch12.0

zohocorp manageengine_key_manager_plusMatch5.6

zohocorp manageengine_mobile_device_manager_plusMatch9.0.0

zohocorp manageengine_netflow_analyzerMatch11.0

zohocorp manageengine_network_configuration_managerMatch11.0

zohocorp manageengine_o365_manager_plusMatch4.0

zohocorp manageengine_opmanagerMatch12.3

zohocorp manageengine_oputilsMatch11.0

zohocorp manageengine_password_manager_proMatch9.9

zohocorp manageengine_patch_connect_plusMatch9.0.0

zohocorp manageengine_patch_manager_plusMatch9.0.0

zohocorp manageengine_servicedesk_plusMatch10.0.0

zohocorp manageengine_supportcenter_plusMatch8.1

zohocorp manageengine_vulnerability_manager_plusMatch9.0.0

Source	Link
manageengine	www.manageengine.com/products/desktop-central/elevation-of-privilege-vulnerability.html
github	www.github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-007.md

17 Jun 2026 02:14Current

8.1High risk

Vulners AI Score8.1

CVSS 27.2

CVSS 37.8

EPSS0.01724