Design/Logic Flaw

2023-01-1720:15:00

PRIOn knowledge base

www.prio-n.com

zoho manageengine

exchange reporter plus

xxe attacks

7.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.1%

JSON

Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.

CPENameOperatorVersion
manageengine_exchange_reporter_pluseq5.7 5700
manageengine_exchange_reporter_pluslt5.7
manageengine_exchange_reporter_pluseq5.7 5701
manageengine_exchange_reporter_pluseq5.7 5702
manageengine_exchange_reporter_pluseq5.7 5703
manageengine_exchange_reporter_pluseq5.7 5704
manageengine_exchange_reporter_pluseq5.7 5705
manageengine_exchange_reporter_pluseq5.7 5706
manageengine_exchange_reporter_pluseq5.7 5707

Name	Operator	Version
manageengine_exchange_reporter_plus	eq	5.7 5700
manageengine_exchange_reporter_plus	lt	5.7
manageengine_exchange_reporter_plus	eq	5.7 5701
manageengine_exchange_reporter_plus	eq	5.7 5702
manageengine_exchange_reporter_plus	eq	5.7 5703
manageengine_exchange_reporter_plus	eq	5.7 5704
manageengine_exchange_reporter_plus	eq	5.7 5705
manageengine_exchange_reporter_plus	eq	5.7 5706
manageengine_exchange_reporter_plus	eq	5.7 5707

References

www.manageengine.com/products/exchange-reports/advisory/CVE-2023-22624.html