CVE-2022-40772

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-28

Affected products

• Manageengine Assetexplorer (Zohocorp)
• Manageengine Servicedesk Plus (Zohocorp)
• Manageengine Servicedesk Plus Msp (Zohocorp)
• Manageengine Supportcenter Plus (Zohocorp)

References

• https://manageengine.com
• https://www.manageengine.com/products/service-desk/CVE-2022-40772.html