← Database

CVE-2022-36412

CRITICAL CVSS: 9.8 Published: 2022-07-26 Modified: 2026-06-17

Description

In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.)

Affected Platforms

Zohocorp Manageengine Supportcenter Plus

Weakness Type

CWE-287

References