medium4.9
CVE-2022-40771
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.
Impact
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | before 14.0 Version 14.0 |
| Zohocorp | Manageengine Servicedesk Plus Msp | before 13.0 Version 13.0 |
| Zohocorp | Manageengine Supportcenter Plus | before 11.0 Version 11.0 |
| Zohocorp | Manageengine Assetexplorer | before 6.9 Version 6.9 |