CVE-2019-14693

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.2.0:*:*:*:*:*:*:*

Information

Published : 2019-08-08 11:15

Updated : 2019-10-09 16:46


NVD link : CVE-2019-14693

Mitre link : CVE-2019-14693


JSON object : View

CWE
CWE-611

Improper Restriction of XML External Entity Reference

Advertisement

dedicated server usa

Products Affected

zohocorp

  • manageengine_assetexplorer