CVE-2019-15510

MEDIUM 6.1CVE-2019-15510 · Published 23/03/2020 · updated 17/06/2026

In short

CVE-2019-15510 is a MEDIUM (CVSS 6.1) vulnerability affecting manageengine desktop central (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
manageengine desktop central zohocorp	`= 10.0`	No fix yet

Description

ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration page via the description of a role.

References

esecforte.com/responsible-vulnerability-disclosure-cve-2019-15510-manageengine-desktopcentral-v-10-vulnerable-to-html-injection · Exploit
manageengine.com/products/desktop-central/html-injection.html · Vendor Advisory

More vulnerabilities in manageengine desktop central

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine desktop central

zohocorp

= 10.0

No fix yet

More vulnerabilities in manageengine desktop central

See all →