CVE-2022-36412: Zohocorp ManageEngine SupportCenter Plus

Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days.

In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.)

Affected products

• Zohocorp ManageEngine SupportCenter Plus: version 11.0 only

Published 2022-07-26. Last modified 2026-06-17.