A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve
a malicious XML payload to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
Fri, 22 Nov 2024 12:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2023-03-30T16:28:35.983Z
Updated: 2024-08-03T13:32:59.643Z
Reserved: 2022-12-05T20:53:36.058Z
Link: CVE-2022-43473
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-03-30T17:15:06.750
Modified: 2024-11-21T07:26:33.497
Link: CVE-2022-43473
Redhat
No data.