High severity8.8NVD Advisory· Published Nov 12, 2022· Updated Jun 17, 2026

CVE-2022-40773

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows users to obtain sensitive data during an exportMickeyList export of requests from the list view.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoho ManageEngine/ServiceDesk Plus MSPdescription
Zoho/ManageEngine Service Plusllm-fuzzy
Range: <10609
Zoho/ManageEngine SupportCenter Plusllm-fuzzy
Range: <11025

Patches

Vulnerability mechanics

References

www.manageengine.com/products/service-desk-msp/cve-2022-40773.htmlnvdVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-22-1490/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000