CVE-2022-40771

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure

Medium · published November 23, 2022

CVSS v3.1
4.9
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03713 · 89.7th percentile
Published
2022-11-23T00:00Z
EPSS history
Timeline
  • 23 NOV 00:00Z
    Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure
    cvelistv5