Lucene search
+L

4 matches found

NVD
NVD
•added 2023/04/26 9:15 p.m.•20 views

CVE-2023-29443

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

4.9CVSS5AI score0.03026EPSS
SaveExploits0References1
Prion
Prion
•added 2023/04/26 9:15 p.m.•35 views

Design/Logic Flaw

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

3.3CVSS5AI score0.03026EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
•added 2023/04/26 12:00 a.m.•45 views

CVE-2023-29443

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

5.4AI score0.03026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/26 12:00 a.m.•1 views

CVE-2023-29443: Improper Restriction of XML External Entity Reference

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

4.9CVSS5.8AI score0.03026EPSS
SaveExploits0References3
Rows per page
Query Builder