What’s Vulnerable › Vulnerabilities

CVE-2018-5341

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-04-18 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing server-side check on the file type/extension when uploading and modifying scripts.

Affected products

• ManageEngine Desktop Central: 10.0.124, 10.0.184

References

• https://www.manageengine.com/products/desktop-central/elevation-of-privilege-vulnerability.html
• https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/
• https://www.manageengine.com/products/desktop-central/elevation-of-privilege-vulnerability.html
• https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/

Get alerted when CVE-2018-5341 or the next vulnerability affects your stack