4.9

CVE-2022-40771

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.0 Update -
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.0 Update 14000
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update -
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update 13000
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update -
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11000
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11001
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11002
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11003
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11004
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11005
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11006
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11007
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11008
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11009
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11010
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11011
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11012
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11013
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11014
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11015
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11016
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11017
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11018
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11019
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11020
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11021
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11022
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11024
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11025
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update -
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6900
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6901
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6902
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6903
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6904
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6905
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6906
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6907
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6908
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6909
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6950
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6951
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6952
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6953
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6954
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6955
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6956
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6957
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6970
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6971
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6972
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6973
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6974
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6975
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6976
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6977
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6978
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6979
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6980
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.46% 0.875
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CISA-ADP 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://manageengine.com
Vendor Advisory
https://www.manageengine.com/products/service-desk/CVE-2022-40771.html
Patch
Vendor Advisory