4.9

CVE-2023-35786

Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update -
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7100
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7101
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7102
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7110
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7111
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7112
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7113
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7114
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7115
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7116
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7117
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7118
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7120
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7121
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7122
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7123
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7124
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7125
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7126
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7130
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7131
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7140
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7141
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7150
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7151
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7160
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7161
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7162
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7163
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7170
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7171
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7180
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7181
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7182
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.03% 0.859
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-35786.html
Vendor Advisory