CRITICAL

CVE-2018-5337

CVSS v3

9.8

CRITICAL

EPSS Score

10.4%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPT_NAME field when modifying existing scripts.

Technical details

Published
4/18/2018

Frequently asked questions

What is CVE-2018-5337?

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPT_NAME field when modifying existing scripts.

Is CVE-2018-5337 actively exploited?

Active exploitation of CVE-2018-5337 has not been confirmed. The EPSS score is 10.4%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2018-5337?

CVE-2018-5337 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2018-5337 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.