Manageengine Opmanager Plus Security Vulnerabilities - 2023

CVE-2022-43473

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can servea malicious XML payload to trigger this vulnerability.