Medium · 6.5 CVE-2022-40772 EUVD-2022-44038GHSA-q2mg-h8mw-6fvw

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive dat…

Published Nov 23, 2022 · Updated Apr 28, 2025 · Assigned by mitre

Description

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.

References

https://manageengine.com
https://www.manageengine.com/products/service-desk/CVE-2022-40772.html