Critical severity9.8NVD Advisory· Published Aug 2, 2017· Updated May 13, 2026
CVE-2015-2560
CVE-2015-2560
Description
Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.
Affected products
1- cpe:2.3:a:zohocorp:manageengine_desktop_central:9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- packetstormsecurity.com/files/131062/Manage-Engine-Desktop-Central-9-Unauthorized-Administrative-Password-Reset.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/73380nvdThird Party AdvisoryVDB Entry
- www.manageengine.com/products/desktop-central/unauthorized-admin-credential-modification.htmlnvdVendor Advisory
- www.securityfocus.com/archive/1/535004/100/1400/threadednvd
News mentions
0No linked articles in our index yet.