CVE-2023-22964

9.1 criticalEPSS 2.5%

Critical (9.1) in zohocorp manageengine servicedesk plus msp. EPSS 2.5% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2023-01-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_servicedesk_plus_msp

References

https://manageengine.com
https://www.manageengine.com/products/service-desk-msp/cve-2023-22964.html
https://manageengine.com
https://www.manageengine.com/products/service-desk-msp/cve-2023-22964.html

Check your stack JSON