CVE-2018-5340
mediumpriority · track · 31EPSS 0.050 · 92 %ileEUUSEPSS · scored 2026-10-27
An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account (specifically, an account with permission to write to the filesystem via SQL queries).
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–7.2
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (3)
Products and version ranges known to be affected.
- zohocorp manageengine desktop central= 10.0.124nvdUScpe:2.3:a:zohocorp:manageengine_desktop_central:*:*:*:*:*:*:*:*
- zohocorp manageengine desktop central= 10.0.184nvdUScpe:2.3:a:zohocorp:manageengine_desktop_central:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://www.manageengine.com/Patchcnnvd
- https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.htmlcnnvd
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/cnnvd
- https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.htmlenisa_euvd
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/enisa_euvd
- https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.htmlThird Party Advisorynvd
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/ExploitTechnical DescriptionThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan