CVE-2020-21641 - Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file

Back Back to CVE browser

HIGH

Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file

Published Aug 15, 2022

7.5

HIGH

CVSS 3.1

EPSS 3.94%

Description

Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14409
Advisory
https://www.manageengine.com/analytics-plus/release-notes.html
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14409		Advisory
https://www.manageengine.com/analytics-plus/release-notes.html		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 15, 2022

Updated Aug 4, 2024

Reserved Aug 13, 2020

Link CVE-2020-21641

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-21641

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 15, 2022

Updated Aug 4, 2024

Link EUVD-2020-14409

GitHub

No data