CVE-2022-40771

Description

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.

Related CPE's

azohocorpmanageengine_servicedesk_plus********

azohocorpmanageengine_servicedesk_plus14.014000******

azohocorpmanageengine_servicedesk_plus14.0-******

azohocorpmanageengine_servicedesk_plus_msp********

azohocorpmanageengine_servicedesk_plus_msp13.013000******

azohocorpmanageengine_servicedesk_plus_msp13.0-******

azohocorpmanageengine_supportcenter_plus11.011014******

azohocorpmanageengine_supportcenter_plus11.011013******

azohocorpmanageengine_supportcenter_plus11.011012******

azohocorpmanageengine_supportcenter_plus11.011011******

References

https://manageengine.com

Vendor Advisory

https://www.manageengine.com/products/service-desk/CVE-2022-40771.html

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io