CVE-2024-38868

CVE-2024-38868 affects Zohocorp ManageEngine Endpoint Central. The issue is an Incorrect authorization vulnerability when isolating devices . Affected versions are before 11.3.2406.08 and before 11.3.2400.15, respectively. The available documents describe the vulnerability and list remediation gu...

CVE-2024-10203

CVE-2024-10203 affects Zohocorp/ManageEngine Endpoint Central. Vulnerable components are the Endpoint Central agent on Windows machines, with version ranges 11.3.2416.21 and below and 11.3.2428.9 and below. root cause is described as insecure privilege management that enables Arbitrary File Delet...

CVE-2023-6105

Technical details about CVE-2023-6105 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-9097

Summary: CVE-2024-9097 affects ManageEngine Endpoint Central before 11.3.2440.09. The vulnerability is an insecure direct object reference (IDOR) that allows an attacker to change a user’s name in chat. The issue is present in the endpoint central desktop management system (Host/Chat component) a...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central is affected by an improper privilege management flaw in the agent setup. The issue impacts Endpoint Central versions up to 11.4.2500.25 and up to 11.4.2508.13. Root cause: improper privilege handling during the agent installation process, enabling local priv...

CVE-2025-5496

ZohoCorp ManageEngine Endpoint Central is affected by an arbitrary file deletion vulnerability in the agent setup component for versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01. The issue is described as a local vulnerability with low impact to integrity and no confidentiality/a...

CVE-2025-7473

Zohocorp ManageEngine EndPoint Central (versions 11.4.2516.1 and earlier) are documented as vulnerable to XML Injection. The issue is a parsing/XML data handling flaw leading to injection. Connected advisories indicate these XML injection vulnerabilities were addressed with vendor updates across ...

CVE-2025-11248

ZohoCorp ManageEngine Endpoint Central (versions prior to 11.4.2528.05) are affected by a sensitive information logging issue. An authenticated user with access to the logs can potentially obtain the agent token from log data. Root cause and impact are described consistently across multiple sourc...