Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
ManageEngine Desktop Central Deserialization RCE (CVE-2020-10189) - Vulnerability Database

ManageEngine Desktop Central Deserialization RCE (CVE-2020-10189)

Description

Zoho ManageEngine Desktop Central before 10.0.474 have a java deserialization vulnerability. An attacker could exploit this vulnerability using specially-crafted serialized data to execute arbitrary code on the system.

Remediation

Upgrade to the latest version of ManageEngine Desktop Central

References

ManageEngine Desktop Central FileStorage getChartImage Deserialization of Untrusted Data Remote Code Execution Vulnerability

Related Vulnerabilities

Oracle Weblogic WLS-WSAT Component Deserialization RCE High
Common tags: Acumonitor Code Execution
Apache OFBiz SOAPService Deserialization RCE High
Common tags: Acumonitor Code Execution
ColdFusion JNDI injection RCE High
Common tags: Acumonitor Code Execution
ColdFusion AMF Deserialization RCE High
Common tags: Acumonitor Code Execution
IBM ODM JNDI injection (CVE-2024-22319) Critical
Common tags: Acumonitor Code Execution

Severity

High

Classification

CVE-2020-10189
CWE-502
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Acumonitor
Code Execution