Manageengine Desktop Central Managed Service Providers

DATE	CVE	VULNERABILITY TITLE	RISK
2022-01-18	CVE-2021-44757	Unspecified vulnerability in Zohocorp products Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server. network low complexity zohocorp critical	9.1
2020-01-17	CVE-2014-5007	Path Traversal vulnerability in Zohocorp products Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. network low complexity zohocorp CWE-22 critical	9.8