CVE-2024-38868

HIGH 8.3CVE-2024-38868 · Published 30/08/2024 · updated 17/06/2026

In short

CVE-2024-38868 is a HIGH (CVSS 8.3) vulnerability affecting manageengine endpoint central (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.4% of all vulnerabilities.
Fix: update to 11.3.2406.08, 11.3.2400.15 or later.

Package	Affected versions	Patched versions
manageengine endpoint central zohocorp	`≥ 11.3.2401.05, < 11.3.2406.08< 11.3.2400.15`	`11.3.2406.0811.3.2400.15`

Description

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

References

manageengine.com/products/desktop-central/security-updates-ngav.html · Vendor Advisory

More vulnerabilities in manageengine endpoint central

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine endpoint central

zohocorp

≥ 11.3.2401.05, < 11.3.2406.08< 11.3.2400.15

11.3.2406.0811.3.2400.15

More vulnerabilities in manageengine endpoint central

See all →