CVE-2022-36412

2022-07-2613:34:05

mitre

www.cve.org

zoho manageengine

supportcenter plus

cve-2022-36412

api

authentication bypass

vulnerability

AI Score

9.7

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.)

References

www.manageengine.com/products/support-center/cve-2022-36412.html