← All CVEs

CVE-2014-9371

high · 10

The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.

10
CVSS
19.1%
EPSS (exploit prob.)
97th
EPSS percentile
2014-12-16
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
zohocorpmanageengine_desktop_central<= 9.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-9371