CVE-2022-43473

A blind XML External Entity XXE vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability...

Blind XXE Vulnerability in openEAP Open Enterprise Application Platform of Jiadu Xintai Technology Co.

Jia Du Xintai Technology Co., Ltd. openEAP open enterprise application platform is a development platform for building block call center business. A Blind XXE vulnerability exists in versions 2. and 3. of the openEAP Open Enterprise Application Platform of Jia Du Xintai Technology Co. It allows a...