← Database

CVE-2022-40772

MEDIUM CVSS: 6.5 Published: 2022-11-23 Modified: 2026-06-17

Description

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.

Affected Platforms

Zohocorp Manageengine Supportcenter PlusZohocorp Manageengine Servicedesk Plus MspZohocorp Manageengine Servicedesk PlusZohocorp Manageengine Assetexplorer

Weakness Type

NVD-CWE-noinfo

References