← ExploitWatch
HomeExploited Vulnerabilities

CVE-2020-10189 — Actively Exploited: ManageEngine (Zoho)

Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.

CVE IDCVE-2020-10189
VendorZoho
ProductManageEngine
Vulnerability nameZoho ManageEngine Desktop Central File Upload Vulnerability
Date added2021-11-03
Remediation due2022-05-03
Known ransomware useUnknown
Required actionApply updates per vendor instructions.
DescriptionZoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →