What’s Vulnerable › Vulnerabilities

CVE-2018-5340

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-04-18 · updated 2026-06-17

Description

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account (specifically, an account with permission to write to the filesystem via SQL queries).

Affected products

• ManageEngine Desktop Central: 10.0.124, 10.0.184

References

• https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.html
• https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/
• https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.html
• https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/

Get alerted when CVE-2018-5340 or the next vulnerability affects your stack