CVE-2021-28960

CRÍTICO 9.8CVE-2021-28960 · Published 21/09/2021 · updated 17/06/2026

En resumen

CVE-2021-28960 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a desktop central (manageengine).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 80.4% de las vulnerabilidades.
Solución: actualizar a 10.0.683 o posterior.

Package	Affected versions	Patched versions
desktop central manageengine	`< 10.0.683`	`10.0.683`

Description

Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations.

References

manageengine.com · Vendor Advisory
manageengine.com/products/desktop-central/unauthenticated-command-injection-vulnerability.html · Vendor Advisory

Más vulnerabilidades de desktop central

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free