CVE-2019-14693 - Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data

Back Back to CVE browser

HIGH

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data

Published Aug 8, 2019

8.5

HIGH

CVSS 3.0

EPSS 4.25%

Description

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5843
Advisory
https://www.excellium-services.com/cert-xlm-advisory/cve-2019-14693
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5843		Advisory
https://www.excellium-services.com/cert-xlm-advisory/cve-2019-14693		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 8, 2019

Updated Aug 5, 2024

Reserved Aug 6, 2019

Link CVE-2019-14693

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-14693

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 8, 2019

Updated Aug 5, 2024

Link EUVD-2019-5843

GitHub

No data