medium6.5
CVE-2022-40772
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report mod…
Impact
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | before 14.0 Version 14.0 |
| Zohocorp | Manageengine Servicedesk Plus Msp | before 10.6 Version 10.6 |
| Zohocorp | Manageengine Supportcenter Plus | before 11.0 Version 11.0 |
| Zohocorp | Manageengine Assetexplorer | before 6.9 Version 6.9 |