CVE-2022-40770

HIGH 7.2CVE-2022-40770 · Published 23/11/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
manageengine servicedesk plus zohocorp	`= 13.0< 13.0`	`13.0`
manageengine servicedesk plus msp zohocorp	`= 10.6< 10.6`	`10.6`
manageengine supportcenter plus zohocorp	`= 11.0< 11.0`	`11.0`

Description

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.

References

manageengine.com · Vendor Advisory
manageengine.com/products/service-desk/CVE-2022-40770.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free