9.8

CVE-2018-20664

Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 4500
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5032
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5040
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5041
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5100
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5101
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5102
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5103
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5104
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5105
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5106
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5107
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5108
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5109
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5110
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5111
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5112
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5113
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5114
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5115
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5116
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5200
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5201
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5202
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5203
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5204
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5205
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5206
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5207
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5300
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5301
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5302
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5303
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5304
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5305
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5306
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5307
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5308
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5309
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5310
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5311
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5312
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5313
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5314
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5315
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5316
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5317
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5318
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5319
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5320
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5321
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5322
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5323
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5324
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5325
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5326
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5327
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5328
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5329
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5330
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5400
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5500
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5501
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5502
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5503
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5504
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5505
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5506
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5507
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5508
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5509
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5510
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5511
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5512
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5513
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5514
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5515
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5516
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5517
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5518
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5519
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5520
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5521
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5600
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5601
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5602
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5603
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5604
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5605
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5606
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5607
Zohocorp ≫ Manageengine Adselfservice Plus Version 5.7 Update 5700
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.05% 0.94
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20664/
Third Party Advisory
https://www.manageengine.com/products/self-service-password/release-notes.html#5701
Vendor Advisory
Release Notes