CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2022-35403
High (7.5) in zohocorp. EPSS 6.2% chance of exploitation in the next 30 days.
Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. (This also affects Asset Explorer before 6977 with authentication.)
Severity
- EPSS
- 6.2% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zohocorp:manageengine_assetexplorer
- zohocorp:manageengine_servicedesk_plus
- zohocorp:manageengine_servicedesk_plus_msp
- zohocorp:manageengine_supportcenter_plus