CVE-2022-40771

Published Nov 23, 2022 CVSS 3.1 · 4.9 Medium EPSS 3.8% KEV · Not listed
Description
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-44037 Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Apr 28, 2025, 7:37 PM
Reserved
Sep 18, 2022, 12:00 AM
Status
Modified
Published
Nov 23, 2022, 6:15 PM
Modified
Jun 17, 2026, 5:02 AM