CVE-2020-21641

Out-of-Band XML External Entity OOB-XXE vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file...

Xxe

Out-of-Band XML External Entity OOB-XXE vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file...

PT-2022-8643

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Analytics Plus versions prior to 4.3.5 Description The issue allows remote attackers to read arbitrary files, enumerate folders, and scan internal ports via a crafted XML license file. This is due to an Out-of-Band XML Extern...

CVE-2020-35205: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...