CoreCVE
Back

HIGH

Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file

Published Aug 15, 2022

Description

Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 15, 2022
Updated Aug 4, 2024
Reserved Aug 13, 2020
Link CVE-2020-21641
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-21641
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-21641
ENISA EUVD
Assigner mitre
Published Aug 15, 2022
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-14409
EUVD-2020-14409