High · 7.2 CVE-2022-40770 EUVD-2022-44036GHSA-r3rg-whrj-v9p8

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by hig…

Published Nov 23, 2022 · Updated Apr 28, 2025 · Assigned by mitre

Description

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.

References

https://manageengine.com
https://www.manageengine.com/products/service-desk/CVE-2022-40770.html