CVE-2024-10839

EPSS 1.85%
Veröffentlicht 08.11.2024 11:15:03
Zuletzt bearbeitet 13.11.2024 20:19:01
Erkennungen
Login

XML External Entity

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 90 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4000

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4001

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4002

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4003

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4004

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4005

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4006

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4007

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4008

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4009

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4010

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4011

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4012

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4013

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4014

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4015

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4016

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4017

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4018

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4019

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4020

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4021

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4022

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4023

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4024

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4025

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4026

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4027

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4028

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4029

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4030

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4031

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4032

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.0 Update 4033

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4100

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4101

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4102

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4103

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4104

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4105

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4106

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4107

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4108

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4109

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.1 Update 4110

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.2 Update 4200

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.2 Update 4201

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4300

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4301

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4302

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4303

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4304

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4305

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4306

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4307

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4308

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4309

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4310

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4311

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4312

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4313

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4314

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4315

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4316

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4317

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4318

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4319

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4320

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4321

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4322

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4323

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4324

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4325

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4326

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4327

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4328

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4329

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4330

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4331

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4332

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.3 Update 4333

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4400

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4401

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4402

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4403

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4404

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.5 Update 4500

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.5 Update 4501

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.5 Update 4502

Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.5 Update 4503

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.85%	0.772

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.1	2.8	5.2	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
0fc0942c-577d-436f-ae8e-945763c79b02	8.5	3.1	4.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://www.manageengine.com/sharepoint-management-reporting/advisory/CVE-2024-10839.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-10839

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-10839

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-10839

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-10839