Security Advisory

CVE-2020-10189

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-06 16:05:22

Last updated 2025-10-21 23:35:49

Assigner mitre

CVSS score 9.8

State PUBLISHED

Description

Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets.

← Browse all CVEs View on cve.org ↗