CVE-2022-40773: Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows users to obtain…

PriorityP351high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

4.54%

90.4th percentile

Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows users to obtain sensitive data during an exportMickeyList export of requests from the list view.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
zohocorp	manageengine_servicedesk_plus_msp	< 10.6	10.6
zohocorp	manageengine_servicedesk_plus_msp	—	—
zohocorp	manageengine_supportcenter_plus	< 11.0	11.0
zohocorp	manageengine_supportcenter_plus	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.