CVE-2022-48362 - CVE House
Back to Database
Status published Unknown CVE-2022-48362

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2...

Vulnerability Description

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-48362

Credits & Attribution

No credits recorded in the NVD database.

References

More from zohocorp

View All →
CVE-2022-47966
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through...
Unknown 0
CVE-2022-47578
An issue was discovered in the endpoint protection agent in...
High 7.1
CVE-2022-47577
An issue was discovered in the endpoint protection agent in...
High 7.1
CVE-2022-47523
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro...
Unknown 0
CVE-2022-43672
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711,...
Unknown 0

Affected Vendor

Affected Software

manageengine desktop central
Vulnerable Versions:
0

Timeline

Official Publish: February 25th, 2023
Last Modified: March 11th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.