CVE-2023-22964

—

CVSS 3.1

9.1 critical

EPSS

2%p83

Published

Jan 20, 2023 (Jan 20, 2023)

Modified

Jun 17, 2026

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

Vendors: zohocorp
Products: manageengine servicedesk plus msp
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.