CVE-2022-25245

MEDIUM

Zoho ManageEngine ServiceDesk Plus < 13001 - Unauthenticated Information Disclosure

Title source: llm

Zoho ManageEngine ServiceDesk Plus before 13001 allows anyone to know the organisation's default currency name.

Core 3

Core References

Vendor Advisory x_refsource_misc

Patch, Vendor Advisory x_refsource_confirm

Various Sources x_refsource_misc

CVSS v3 5.3

EPSS 0.0289

EPSS Percentile 86.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-306

Status published

Products (2)

zohocorp/manageengine_servicedesk_plus 13.0 13000

zohocorp/manageengine_servicedesk_plus < 12.0

Published Apr 05, 2022

Tracked Since Feb 18, 2026