CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml)

published July 1, 2022

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03633 · 89.5th percentile
Published
2022-07-01T23:51Z
EPSS history
Timeline
  • 01 JUL 23:51Z
    Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml)
    cvelistv5