Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
Metrics
Affected Vendors & Products
References
History
Mon, 28 Apr 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Status: PUBLISHED
Assigner: mitre
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-28T19:34:22.092Z
Reserved: 2022-09-18T00:00:00.000Z
Link: CVE-2022-40772
Updated: 2024-08-03T12:28:42.922Z
Status : Modified
Published: 2022-11-23T18:15:12.470
Modified: 2025-04-28T20:15:20.220
Link: CVE-2022-40772
No data.