← Database

CVE-2023-22964

CRITICAL CVSS: 9.1 Published: 2023-01-20 Modified: 2026-06-17

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

Affected Platforms

Zohocorp Manageengine Servicedesk Plus Msp

Weakness Type

CWE-287, CWE-287

References