CVEDB API

Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2020-35682

Zohocorp » Manageengine Servicedesk Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:-
Zohocorp » Manageengine Servicedesk Plus » Version: 10.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0
Zohocorp » Manageengine Servicedesk Plus » Version: 10.0.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0
Zohocorp » Manageengine Servicedesk Plus » Version: 10.5

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5
Zohocorp » Manageengine Servicedesk Plus » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0
Zohocorp » Manageengine Servicedesk Plus » Version: 11.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1
Zohocorp » Manageengine Servicedesk Plus » Version: 8.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.1
Zohocorp » Manageengine Servicedesk Plus » Version: 8.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2
Zohocorp » Manageengine Servicedesk Plus » Version: 9.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0
Zohocorp » Manageengine Servicedesk Plus » Version: 9.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1
Zohocorp » Manageengine Servicedesk Plus » Version: 9.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2
Zohocorp » Manageengine Servicedesk Plus » Version: 9.3

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3
Zohocorp » Manageengine Servicedesk Plus » Version: 9.4

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4