CVE-2014-7862

9.8 criticalEPSS 81%

Critical (9.8) in zohocorp desktop central. EPSS 81% chance of exploitation in the next 30 days.

The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 81% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2018-01-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:desktop_central

References

http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html
http://seclists.org/fulldisclosure/2015/Jan/2
http://www.securityfocus.com/archive/1/534356/100/0/threaded
http://www.securityfocus.com/bid/71849
https://exchange.xforce.ibmcloud.com/vulnerabilities/99595

Check your stack JSON