Critical severity9.8NVD Advisory· Published Aug 2, 2017· Updated Jun 17, 2026
CVE-2015-2560
CVE-2015-2560
Description
Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:zohocorp:manageengine_desktop_central:9.0:*:*:*:*:*:*:*
- Range: <90135
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/131062/Manage-Engine-Desktop-Central-9-Unauthorized-Administrative-Password-Reset.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/73380nvdThird Party AdvisoryVDB Entry
- www.manageengine.com/products/desktop-central/unauthorized-admin-credential-modification.htmlnvdVendor Advisory
- www.securityfocus.com/archive/1/535004/100/1400/threadednvd
News mentions
0No linked articles in our index yet.