Lucene search
HistoryMar 30, 2023 - 5:15 p.m.
CVE-2022-43473
cve-2022-43473
xml
ssrf
vulnerability
manageengine opmanager
xxe
add ucs device
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
0.006 Low
EPSS
Percentile
79.1%
A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve
a malicious XML payload to trigger this vulnerability.
Affected configurations
Node
zohocorpmanageengine_opmanagerRange<12.6
ORzohocorpmanageengine_opmanagerMatch12.6build126000
ORzohocorpmanageengine_opmanagerMatch12.6build126001
ORzohocorpmanageengine_opmanagerMatch12.6build126002
ORzohocorpmanageengine_opmanagerMatch12.6build126004
ORzohocorpmanageengine_opmanagerMatch12.6build126005
ORzohocorpmanageengine_opmanagerMatch12.6build126100
ORzohocorpmanageengine_opmanagerMatch12.6build126101
ORzohocorpmanageengine_opmanagerMatch12.6build126102
ORzohocorpmanageengine_opmanagerMatch12.6build126103
ORzohocorpmanageengine_opmanagerMatch12.6build126104
ORzohocorpmanageengine_opmanagerMatch12.6build126107
ORzohocorpmanageengine_opmanagerMatch12.6build126108
ORzohocorpmanageengine_opmanagerMatch12.6build126109
ORzohocorpmanageengine_opmanagerMatch12.6build126110
ORzohocorpmanageengine_opmanagerMatch12.6build126113
ORzohocorpmanageengine_opmanagerMatch12.6build126114
ORzohocorpmanageengine_opmanagerMatch12.6build126115
ORzohocorpmanageengine_opmanagerMatch12.6build126116
ORzohocorpmanageengine_opmanagerMatch12.6build126117
ORzohocorpmanageengine_opmanagerMatch12.6build126118
ORzohocorpmanageengine_opmanagerMatch12.6build126119
ORzohocorpmanageengine_opmanagerMatch12.6build126120
ORzohocorpmanageengine_opmanagerMatch12.6build126121
ORzohocorpmanageengine_opmanagerMatch12.6build126122
ORzohocorpmanageengine_opmanagerMatch12.6build126130
ORzohocorpmanageengine_opmanagerMatch12.6build126131
ORzohocorpmanageengine_opmanagerMatch12.6build126132
ORzohocorpmanageengine_opmanagerMatch12.6build126134
ORzohocorpmanageengine_opmanagerMatch12.6build126135
ORzohocorpmanageengine_opmanagerMatch12.6build126136
ORzohocorpmanageengine_opmanagerMatch12.6build126139
ORzohocorpmanageengine_opmanagerMatch12.6build126141
ORzohocorpmanageengine_opmanagerMatch12.6build126147
ORzohocorpmanageengine_opmanagerMatch12.6build126148
ORzohocorpmanageengine_opmanagerMatch12.6build126149
ORzohocorpmanageengine_opmanagerMatch12.6build126150
ORzohocorpmanageengine_opmanagerMatch12.6build126151
ORzohocorpmanageengine_opmanagerMatch12.6build126154
ORzohocorpmanageengine_opmanagerMatch12.6build126155
ORzohocorpmanageengine_opmanagerMatch12.6build126162
ORzohocorpmanageengine_opmanagerMatch12.6build126163
ORzohocorpmanageengine_opmanagerMatch12.6build126164
ORzohocorpmanageengine_opmanagerMatch12.6build126165
ORzohocorpmanageengine_opmanagerMatch12.6build126166
ORzohocorpmanageengine_opmanagerMatch12.6build126167
ORzohocorpmanageengine_opmanagerMatch12.6build126168
Node
zohocorpmanageengine_opmanager_plusRange<12.6
ORzohocorpmanageengine_opmanager_plusMatch12.6build126001
ORzohocorpmanageengine_opmanager_plusMatch12.6build126002
ORzohocorpmanageengine_opmanager_plusMatch12.6build126100
ORzohocorpmanageengine_opmanager_plusMatch12.6build126103
ORzohocorpmanageengine_opmanager_plusMatch12.6build126104
ORzohocorpmanageengine_opmanager_plusMatch12.6build126107
ORzohocorpmanageengine_opmanager_plusMatch12.6build126113
ORzohocorpmanageengine_opmanager_plusMatch12.6build126117
ORzohocorpmanageengine_opmanager_plusMatch12.6build126119
ORzohocorpmanageengine_opmanager_plusMatch12.6build126122
ORzohocorpmanageengine_opmanager_plusMatch12.6build126139
ORzohocorpmanageengine_opmanager_plusMatch12.6build126140
ORzohocorpmanageengine_opmanager_plusMatch12.6build126141
ORzohocorpmanageengine_opmanager_plusMatch12.6build126154
ORzohocorpmanageengine_opmanager_plusMatch12.6build126155
ORzohocorpmanageengine_opmanager_plusMatch12.6build126264
Node
zohocorpmanageengine_opmanager_mspRange<12.6
ORzohocorpmanageengine_opmanager_mspMatch12.6build126001
ORzohocorpmanageengine_opmanager_mspMatch12.6build126002
ORzohocorpmanageengine_opmanager_mspMatch12.6build126100
ORzohocorpmanageengine_opmanager_mspMatch12.6build126103
ORzohocorpmanageengine_opmanager_mspMatch12.6build126104
ORzohocorpmanageengine_opmanager_mspMatch12.6build126107
ORzohocorpmanageengine_opmanager_mspMatch12.6build126113
ORzohocorpmanageengine_opmanager_mspMatch12.6build126117
ORzohocorpmanageengine_opmanager_mspMatch12.6build126119
ORzohocorpmanageengine_opmanager_mspMatch12.6build126122
ORzohocorpmanageengine_opmanager_mspMatch12.6build126139
ORzohocorpmanageengine_opmanager_mspMatch12.6build126140
ORzohocorpmanageengine_opmanager_mspMatch12.6build126141
ORzohocorpmanageengine_opmanager_mspMatch12.6build126154
ORzohocorpmanageengine_opmanager_mspMatch12.6build126155
ORzohocorpmanageengine_opmanager_mspMatch12.6build126264
Related
cvelist
cvelist
CVE-2022-43473
2023-03-30 16:28:35
nessus
nessus
prion
prion
Xxe
2023-03-30 17:15:00
cve
cve
CVE-2022-43473
2023-03-30 17:15:06
talosblog
talosblog
talos
talos
ManageEngine OpManager Add UCS Device blind XXE vulnerability
2023-03-30 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
0.006 Low
EPSS
Percentile
79.1%
Related for NVD:CVE-2022-43473