NetSight
critical10.0

CVE-2014-9371

The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.

Impact

The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.

Affected products

VendorProductAffected versions
ZohocorpManageengine Desktop Central
through 9.0

Weakness classification

References