CVE-2022-42903: Low severity ZohoCorp Manageengine Supportcenter Plus vulnerability
Published Nov 17, 2022
·Updated
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list.
Affected Software
25 affected components
ZohoCorp Manageengine Supportcenter Plus=11.0
ZohoCorp Manageengine Supportcenter Plus=11.0-11000
ZohoCorp Manageengine Supportcenter Plus=11.0-11001
ZohoCorp Manageengine Supportcenter Plus=11.0-11002
ZohoCorp Manageengine Supportcenter Plus=11.0-11003
ZohoCorp Manageengine Supportcenter Plus=11.0-11004
ZohoCorp Manageengine Supportcenter Plus=11.0-11005
ZohoCorp Manageengine Supportcenter Plus=11.0-11006
ZohoCorp Manageengine Supportcenter Plus=11.0-11007
ZohoCorp Manageengine Supportcenter Plus=11.0-11008
ZohoCorp Manageengine Supportcenter Plus=11.0-11009
ZohoCorp Manageengine Supportcenter Plus=11.0-11010
ZohoCorp Manageengine Supportcenter Plus=11.0-11011
ZohoCorp Manageengine Supportcenter Plus=11.0-11012
ZohoCorp Manageengine Supportcenter Plus=11.0-11013
ZohoCorp Manageengine Supportcenter Plus=11.0-11014
ZohoCorp Manageengine Supportcenter Plus=11.0-11015
ZohoCorp Manageengine Supportcenter Plus=11.0-11016
ZohoCorp Manageengine Supportcenter Plus=11.0-11017
ZohoCorp Manageengine Supportcenter Plus=11.0-11018
ZohoCorp Manageengine Supportcenter Plus=11.0-11019
ZohoCorp Manageengine Supportcenter Plus=11.0-11020
ZohoCorp Manageengine Supportcenter Plus=11.0-11021
ZohoCorp Manageengine Supportcenter Plus=11.0-11022
ZohoCorp Manageengine Supportcenter Plus=11.0-11024
Event History
Nov 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-42903.
2
What software is affected by this vulnerability?
Zoho ManageEngine SupportCenter Plus versions 11.0 to 11.0-11024 are affected by this vulnerability.
3
What is the severity of CVE-2022-42903?
The severity of CVE-2022-42903 is low with a CVSS score of 3.3.
4
How can low-privileged users exploit this vulnerability?
Low-privileged users can exploit this vulnerability to view the organization users list.
5
Is there a fix available for this vulnerability?
Yes, Zoho has provided a fix for this vulnerability. Please refer to the official Zoho ManageEngine SupportCenter Plus website for more information.