CVE-2022-40771: zohocorp manageengine servicedesk plus +3 la…

csirt@kutim:~/threat-intel/cve/CVE-2022-40771

CVSS 4.9 · Medium EPSS 3,7%

Kerentanan Improper Restriction of XML External Entity Reference pada zohocorp manageengine servicedesk plus, zohocorp manageengine servicedesk plus msp +2 lainnya. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.

Rincian

Terbit di NVD: 23 November 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-611: Improper Restriction of XML External Entity Reference
EPSS (30 hari): 3,7% peluang dieksploitasi; lebih tinggi dari 89,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
zohocorp	manageengine servicedesk plus	Semua versi sebelum 14.0
zohocorp	manageengine servicedesk plus	Versi 14.0
zohocorp	manageengine servicedesk plus	Versi 14.0 14000
zohocorp	manageengine servicedesk plus msp	Semua versi sebelum 13.0
zohocorp	manageengine servicedesk plus msp	Versi 13.0
zohocorp	manageengine servicedesk plus msp	Versi 13.0 13000
zohocorp	manageengine supportcenter plus	Semua versi sebelum 11.0
zohocorp	manageengine supportcenter plus	Versi 11.0
zohocorp	manageengine supportcenter plus	Versi 11.0 11000
zohocorp	manageengine supportcenter plus	Versi 11.0 11001
zohocorp	manageengine supportcenter plus	Versi 11.0 11002
zohocorp	manageengine supportcenter plus	Versi 11.0 11003
zohocorp	manageengine supportcenter plus	Versi 11.0 11004
zohocorp	manageengine supportcenter plus	Versi 11.0 11005
zohocorp	manageengine supportcenter plus	Versi 11.0 11006
zohocorp	manageengine supportcenter plus	Versi 11.0 11007
zohocorp	manageengine supportcenter plus	Versi 11.0 11008
zohocorp	manageengine supportcenter plus	Versi 11.0 11009
zohocorp	manageengine supportcenter plus	Versi 11.0 11010
zohocorp	manageengine supportcenter plus	Versi 11.0 11011
zohocorp	manageengine supportcenter plus	Versi 11.0 11012
zohocorp	manageengine supportcenter plus	Versi 11.0 11013
zohocorp	manageengine supportcenter plus	Versi 11.0 11014
zohocorp	manageengine supportcenter plus	Versi 11.0 11015
zohocorp	manageengine supportcenter plus	Versi 11.0 11016
zohocorp	manageengine supportcenter plus	Versi 11.0 11017
zohocorp	manageengine supportcenter plus	Versi 11.0 11018
zohocorp	manageengine supportcenter plus	Versi 11.0 11019
zohocorp	manageengine supportcenter plus	Versi 11.0 11020
zohocorp	manageengine supportcenter plus	Versi 11.0 11021
zohocorp	manageengine supportcenter plus	Versi 11.0 11022
zohocorp	manageengine supportcenter plus	Versi 11.0 11024
zohocorp	manageengine supportcenter plus	Versi 11.0 11025
zohocorp	manageengine assetexplorer	Semua versi sebelum 6.9
zohocorp	manageengine assetexplorer	Versi 6.9
zohocorp	manageengine assetexplorer	Versi 6.9 6900
zohocorp	manageengine assetexplorer	Versi 6.9 6901
zohocorp	manageengine assetexplorer	Versi 6.9 6902
zohocorp	manageengine assetexplorer	Versi 6.9 6903
zohocorp	manageengine assetexplorer	Versi 6.9 6904
zohocorp	manageengine assetexplorer	Versi 6.9 6905
zohocorp	manageengine assetexplorer	Versi 6.9 6906
zohocorp	manageengine assetexplorer	Versi 6.9 6907
zohocorp	manageengine assetexplorer	Versi 6.9 6908
zohocorp	manageengine assetexplorer	Versi 6.9 6909
zohocorp	manageengine assetexplorer	Versi 6.9 6950
zohocorp	manageengine assetexplorer	Versi 6.9 6951
zohocorp	manageengine assetexplorer	Versi 6.9 6952
zohocorp	manageengine assetexplorer	Versi 6.9 6953
zohocorp	manageengine assetexplorer	Versi 6.9 6954
zohocorp	manageengine assetexplorer	Versi 6.9 6955
zohocorp	manageengine assetexplorer	Versi 6.9 6956
zohocorp	manageengine assetexplorer	Versi 6.9 6957
zohocorp	manageengine assetexplorer	Versi 6.9 6970
zohocorp	manageengine assetexplorer	Versi 6.9 6971
zohocorp	manageengine assetexplorer	Versi 6.9 6972
zohocorp	manageengine assetexplorer	Versi 6.9 6973
zohocorp	manageengine assetexplorer	Versi 6.9 6974
zohocorp	manageengine assetexplorer	Versi 6.9 6975
zohocorp	manageengine assetexplorer	Versi 6.9 6976

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 64 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://manageengine.com advisory vendor
https://www.manageengine.com/products/service-desk/CVE-2022-40771.html patch · advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.