Unrated severityNVD Advisory· Published Feb 4, 2015· Updated Jun 17, 2026
CVE-2014-9331
CVE-2014-9331
Description
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an addUser action to STATE_ID/1417736606982/roleMgmt.do.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:zohocorp:manageengine_desktop_central:*:*:*:*:*:*:*:*Range: <=9.0
- Range: <9 build 90130
Patches
Vulnerability mechanics
References
5- www.manageengine.com/products/desktop-central/cve20149331-cross-site-request-forgery.htmlnvdPatchVendor Advisory
- packetstormsecurity.com/files/130219/ManageEngine-Desktop-Central-9-Cross-Site-Request-Forgery.htmlnvdExploit
- www.exploit-db.com/exploits/35980nvdExploit
- www.securityfocus.com/archive/1/534604/100/0/threadednvd
- www.securityfocus.com/bid/72464nvd
News mentions
0No linked articles in our index yet.