CVE-2022-40772

Published Nov 23, 2022 CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed
Description
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-44038 Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Apr 28, 2025, 7:34 PM
Reserved
Sep 18, 2022, 12:00 AM
Status
Modified
Published
Nov 23, 2022, 6:15 PM
Modified
Jun 17, 2026, 5:02 AM