Lucene search
K

ManageEngine ServiceDesk Plus invokeDataUploadTool Command Injection Remote Code Execution Vulnerability

šŸ—“ļøĀ 21 Nov 2022Ā 00:00:00Reported byĀ Piotr Bazydlo (@chudypb) of Trend Micro Zero Day InitiativeTypeĀ 
zdi
Ā zdi
šŸ”—Ā www.zerodayinitiative.comšŸ‘Ā 25Ā Views

ManageEngine ServiceDesk Plus invokeDataUploadTool Command Injection Vulnerability. Allows remote attackers to execute arbitrary code requiring authenticatio

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2022-40770
23 Nov 202207:13
–circl
CNNVD
ZOHO ManageEngine ServiceDesk Plus å‘½ä»¤ę³Øå…„ę¼ę“ž
23 Nov 202200:00
–cnnvd
CVE
CVE-2022-40770
23 Nov 202200:00
–cve
Cvelist
CVE-2022-40770
23 Nov 202200:00
–cvelist
Tenable Nessus
ManageEngine ServiceDesk Plus < 13.0 Build 13011 RCE
2 Dec 202200:00
–nessus
Tenable Nessus
ManageEngine ServiceDesk Plus MSP < 13.0 Build 13000 RCE
2 Dec 202200:00
–nessus
Tenable Nessus
ManageEngine SupportCenter Plus < 11.0 Build 11026 Multiple Vulnerabilities
2 Dec 202200:00
–nessus
NVD
CVE-2022-40770
23 Nov 202203:15
–nvd
OSV
CVE-2022-40770
23 Nov 202203:15
–osv
Prion
Command injection
23 Nov 202203:15
–prion
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2022 00:00Current
3.3Low risk
Vulners AI Score3.3
CVSS 37.2
EPSS0.82529
25