An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-03-11T16:15:47
Updated: 2024-08-04T10:03:45.931Z
Reserved: 2020-02-03T00:00:00
Link: CVE-2020-8540
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-03-11T17:15:16.250
Modified: 2024-11-21T05:38:59.780
Link: CVE-2020-8540
Redhat
No data.