CVE-2021-37414

HIGH CVSS: 7.5 Published: 2021-09-10 Modified: 2026-06-17

Description

Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.

Affected Platforms

Zohocorp Manageengine Desktop Central

Weakness Type

CWE-287

References