ManageEngine Endpoint Central vulnerabilities

3 known vulnerabilities in ManageEngine Endpoint Central from Zoho. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Endpoint Central: Improper Privilege Management

  CVE-2025-5494Sep 25, 2025Zoho

  ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.

• 7.8 High severity

  EndPoint Central: Improper Privilege Management

  CVE-2024-10203Nov 7, 2024ManageEngine

  Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines.

• 8.3 High severity

  Endpoint Central: Incorrect Authorization

  CVE-2024-38868Aug 30, 2024ManageEngine

  Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15