CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-40773

Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows users to obtain sensitive data during an exportMickeyList export of requests from the list view.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.3%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2022-40773

Zohocorp » Manageengine Servicedesk Plus Msp » Version: N/A

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:-
Zohocorp » Manageengine Servicedesk Plus Msp » Version: 10.5

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.5
Zohocorp » Manageengine Servicedesk Plus Msp » Version: 10.6

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6
Zohocorp » Manageengine Supportcenter Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:-
Zohocorp » Manageengine Supportcenter Plus » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0
Zohocorp » Manageengine Supportcenter Plus » Version: 7.9

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:7.9
Zohocorp » Manageengine Supportcenter Plus » Version: 7.90

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:7.90
Zohocorp » Manageengine Supportcenter Plus » Version: 8.0

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:8.0
Zohocorp » Manageengine Supportcenter Plus » Version: 8.1

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-40773

Products

Pricing

Contact Us