Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
References
Link | Resource |
---|---|
https://www.excellium-services.com/cert-xlm-advisory/cve-2019-14693 | Third Party Advisory |
Configurations
Information
Published : 2019-08-08 11:15
Updated : 2019-10-09 16:46
NVD link : CVE-2019-14693
Mitre link : CVE-2019-14693
JSON object : View
CWE
CWE-611
Improper Restriction of XML External Entity Reference
Products Affected
zohocorp
- manageengine_assetexplorer