← Database

CVE-2022-35403

HIGH CVSS: 7.5 Published: 2022-07-12 Modified: 2026-06-17

Description

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. (This also affects Asset Explorer before 6977 with authentication.)

Affected Platforms

Zohocorp Manageengine Supportcenter PlusZohocorp Manageengine Servicedesk Plus MspZohocorp Manageengine Servicedesk PlusZohocorp Manageengine Assetexplorer

Weakness Type

NVD-CWE-noinfo

References