← Database

CVE-2022-40771

MEDIUM CVSS: 4.9 Published: 2022-11-23 Modified: 2026-06-17

Description

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.

Affected Platforms

Zohocorp Manageengine Supportcenter PlusZohocorp Manageengine Servicedesk Plus MspZohocorp Manageengine Servicedesk PlusZohocorp Manageengine Assetexplorer

Weakness Type

CWE-611, CWE-611

References