Lucene search

MitreCVE-2022-40771

HistoryNov 23, 2022 - 6:15 p.m.

CVE-2022-40771

2022-11-2318:15:12

CWE-611

mitre

web.nvd.nist.gov

zoho

manageengine

servicedesk plus

cve-2022-40771

vulnerability

xml external entity attack

information disclosure

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.

Affected configurations

Nvd

Node

zohocorpmanageengine_servicedesk_plusRange<14.0

zohocorpmanageengine_servicedesk_plusMatch14.0-

zohocorpmanageengine_servicedesk_plusMatch14.014000

Node

zohocorpmanageengine_servicedesk_plus_mspRange<13.0

zohocorpmanageengine_servicedesk_plus_mspMatch13.0-

zohocorpmanageengine_servicedesk_plus_mspMatch13.013000

Node

zohocorpmanageengine_supportcenter_plusRange<11.0

zohocorpmanageengine_supportcenter_plusMatch11.0-

zohocorpmanageengine_supportcenter_plusMatch11.011000

zohocorpmanageengine_supportcenter_plusMatch11.011001

zohocorpmanageengine_supportcenter_plusMatch11.011002

zohocorpmanageengine_supportcenter_plusMatch11.011003

zohocorpmanageengine_supportcenter_plusMatch11.011004

zohocorpmanageengine_supportcenter_plusMatch11.011005

zohocorpmanageengine_supportcenter_plusMatch11.011006

zohocorpmanageengine_supportcenter_plusMatch11.011007

zohocorpmanageengine_supportcenter_plusMatch11.011008

zohocorpmanageengine_supportcenter_plusMatch11.011009

zohocorpmanageengine_supportcenter_plusMatch11.011010

zohocorpmanageengine_supportcenter_plusMatch11.011011

zohocorpmanageengine_supportcenter_plusMatch11.011012

zohocorpmanageengine_supportcenter_plusMatch11.011013

zohocorpmanageengine_supportcenter_plusMatch11.011014

zohocorpmanageengine_supportcenter_plusMatch11.011015

zohocorpmanageengine_supportcenter_plusMatch11.011016

zohocorpmanageengine_supportcenter_plusMatch11.011017

zohocorpmanageengine_supportcenter_plusMatch11.011018

zohocorpmanageengine_supportcenter_plusMatch11.011019

zohocorpmanageengine_supportcenter_plusMatch11.011020

zohocorpmanageengine_supportcenter_plusMatch11.011021

zohocorpmanageengine_supportcenter_plusMatch11.011022

zohocorpmanageengine_supportcenter_plusMatch11.011024

zohocorpmanageengine_supportcenter_plusMatch11.011025

Node

zohocorpmanageengine_assetexplorerRange<6.9

zohocorpmanageengine_assetexplorerMatch6.9-

zohocorpmanageengine_assetexplorerMatch6.96900

zohocorpmanageengine_assetexplorerMatch6.96901

zohocorpmanageengine_assetexplorerMatch6.96902

zohocorpmanageengine_assetexplorerMatch6.96903

zohocorpmanageengine_assetexplorerMatch6.96904

zohocorpmanageengine_assetexplorerMatch6.96905

zohocorpmanageengine_assetexplorerMatch6.96906

zohocorpmanageengine_assetexplorerMatch6.96907

zohocorpmanageengine_assetexplorerMatch6.96908

zohocorpmanageengine_assetexplorerMatch6.96909

zohocorpmanageengine_assetexplorerMatch6.96950

zohocorpmanageengine_assetexplorerMatch6.96951

zohocorpmanageengine_assetexplorerMatch6.96952

zohocorpmanageengine_assetexplorerMatch6.96953

zohocorpmanageengine_assetexplorerMatch6.96954

zohocorpmanageengine_assetexplorerMatch6.96955

zohocorpmanageengine_assetexplorerMatch6.96956

zohocorpmanageengine_assetexplorerMatch6.96957

zohocorpmanageengine_assetexplorerMatch6.96970

zohocorpmanageengine_assetexplorerMatch6.96971

zohocorpmanageengine_assetexplorerMatch6.96972

zohocorpmanageengine_assetexplorerMatch6.96973

zohocorpmanageengine_assetexplorerMatch6.96974

zohocorpmanageengine_assetexplorerMatch6.96975

zohocorpmanageengine_assetexplorerMatch6.96976

zohocorpmanageengine_assetexplorerMatch6.96977

zohocorpmanageengine_assetexplorerMatch6.96978

zohocorpmanageengine_assetexplorerMatch6.96979

zohocorpmanageengine_assetexplorerMatch6.96980

VendorProductVersionCPE
zohocorpmanageengine_servicedesk_plus*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus14.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus14.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:-:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus*cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11000:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001:*:*:*:*:*:*

Vendor	Product	Version	CPE
zohocorp	manageengine_servicedesk_plus	*	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus::::::::
zohocorp	manageengine_servicedesk_plus	14.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-::::::
zohocorp	manageengine_servicedesk_plus	14.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000::::::
zohocorp	manageengine_servicedesk_plus_msp	*	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp::::::::
zohocorp	manageengine_servicedesk_plus_msp	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:-::::::
zohocorp	manageengine_servicedesk_plus_msp	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000::::::
zohocorp	manageengine_supportcenter_plus	*	cpe:2.3:a:zohocorp:manageengine_supportcenter_plus::::::::
zohocorp	manageengine_supportcenter_plus	11.0	cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-::::::
zohocorp	manageengine_supportcenter_plus	11.0	cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11000::::::
zohocorp	manageengine_supportcenter_plus	11.0	cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001::::::

Rows per page:

1-10 of 641

References

manageengine.com

www.manageengine.com/products/service-desk/CVE-2022-40771.html

Social References

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

Related for CVE-2022-40771