CVE-2019-11677

2019-05-0213:06:10

mitre

www.cve.org

9.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.

References

www.manageengine.com/products/firewall/release-notes.html