Lucene search
HistoryJan 17, 2023 - 8:15 p.m.
CVE-2023-22624
cve-2023-22624
zoho manageengine
exchange reporter plus
5708
xxe
vulnerability
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.1%
Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.
Affected configurations
Node
zohocorpmanageengine_exchange_reporter_plusRange<5.7
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75700
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75701
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75702
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75703
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75704
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75705
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75706
ORzohocorpmanageengine_exchange_reporter_plusMatch5.75707
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_exchange_reporter_plus | zohocorp manageengine exchange reporter plus | lt | 5.7 |
Related
cvelist
cvelist
CVE-2023-22624
2023-01-17 00:00:00
prion
prion
Design/Logic Flaw
2023-01-17 20:15:00
nvd
nvd
CVE-2023-22624
2023-01-17 20:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.1%
Related for CVE-2023-22624