CVE-2022-40770
high · 7.2Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.
7.2
CVSS
81.3%
EPSS (exploit prob.)
100th
EPSS percentile
2022-11-23
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zohocorp | manageengine_servicedesk_plus | < 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus | 13.0 |
| zohocorp | manageengine_servicedesk_plus_msp | < 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 10.6 |
| zohocorp | manageengine_supportcenter_plus | < 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
| zohocorp | manageengine_supportcenter_plus | 11.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-40770