CVE-2026-3182

Full vulnerability record from the local CVENow database.

Description

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.

Severity

MEDIUM

CVSS score

4.3 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-07-21 06:16:28.890000

Last modified

2026-10-24 20:10:00.137000

View original CVE JSON

{
  "id": "CVE-2026-3182",
  "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
  "published": "2026-07-21T06:16:28.890",
  "lastModified": "2026-10-24T20:10:00.137",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability."
    },
    {
      "lang": "es",
      "value": "Las versiones de Zohocorp ManageEngine Endpoint Central anteriores a la 11.4.2528.34 están afectadas por una vulnerabilidad de transmisión en texto claro de información sensible."
    }
  ],
  "affected": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "affectedData": [
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine Endpoint Central",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "11.4.2528.34",
              "versionType": "0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-21T15:03:06.941312Z",
          "id": "CVE-2026-3182",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-319"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.manageengine.com/products/desktop-central/mail-configuration-data.html",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02"
    }
  ]
}