Lucene search
MitreCVE-2022-42903HistoryNov 17, 2022 - 10:15 p.m.
CVE-2022-42903
2022-11-1722:15:10
CWE-862
mitre
web.nvd.nist.gov
35
6
information security
vulnerability
cve-2022-42903
zoho
manageengine
supportcenter plus
organization users list
nvd
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.1
Confidence
High
EPSS
0.001
Percentile
26.8%
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list.
Affected configurations
Node
zohocorpmanageengine_supportcenter_plusMatch11.0-
ORzohocorpmanageengine_supportcenter_plusMatch11.011000
ORzohocorpmanageengine_supportcenter_plusMatch11.011001
ORzohocorpmanageengine_supportcenter_plusMatch11.011002
ORzohocorpmanageengine_supportcenter_plusMatch11.011003
ORzohocorpmanageengine_supportcenter_plusMatch11.011004
ORzohocorpmanageengine_supportcenter_plusMatch11.011005
ORzohocorpmanageengine_supportcenter_plusMatch11.011006
ORzohocorpmanageengine_supportcenter_plusMatch11.011007
ORzohocorpmanageengine_supportcenter_plusMatch11.011008
ORzohocorpmanageengine_supportcenter_plusMatch11.011009
ORzohocorpmanageengine_supportcenter_plusMatch11.011010
ORzohocorpmanageengine_supportcenter_plusMatch11.011011
ORzohocorpmanageengine_supportcenter_plusMatch11.011012
ORzohocorpmanageengine_supportcenter_plusMatch11.011013
ORzohocorpmanageengine_supportcenter_plusMatch11.011014
ORzohocorpmanageengine_supportcenter_plusMatch11.011015
ORzohocorpmanageengine_supportcenter_plusMatch11.011016
ORzohocorpmanageengine_supportcenter_plusMatch11.011017
ORzohocorpmanageengine_supportcenter_plusMatch11.011018
ORzohocorpmanageengine_supportcenter_plusMatch11.011019
ORzohocorpmanageengine_supportcenter_plusMatch11.011020
ORzohocorpmanageengine_supportcenter_plusMatch11.011021
ORzohocorpmanageengine_supportcenter_plusMatch11.011022
ORzohocorpmanageengine_supportcenter_plusMatch11.011024
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11000:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11002:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11003:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11004:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11005:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11006:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11007:*:*:*:*:*:* |
| zohocorp | manageengine_supportcenter_plus | 11.0 | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11008:*:*:*:*:*:* |
Social References
More
Related
nessus
nessus
ManageEngine SupportCenter Plus < 11.0 Build 11025
2023-11-15 00:00:00
cvelist
cvelist
CVE-2022-42903
2022-11-17 00:00:00
prion
prion
Code injection
2022-11-17 22:15:00
nvd
nvd
CVE-2022-42903
2022-11-17 22:15:10
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.1
Confidence
High
EPSS
0.001
Percentile
26.8%
Related for CVE-2022-42903