Lucene search

MitreCVE-2023-22624

HistoryJan 17, 2023 - 8:15 p.m.

CVE-2023-22624

2023-01-1720:15:11

CWE-611

mitre

web.nvd.nist.gov

cve-2023-22624

zoho manageengine

exchange reporter plus

5708

xxe

vulnerability

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.008

Percentile

81.7%

JSON

Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.

Affected configurations

Nvd

Node

zohocorpmanageengine_exchange_reporter_plusRange<5.7

zohocorpmanageengine_exchange_reporter_plusMatch5.75700

zohocorpmanageengine_exchange_reporter_plusMatch5.75701

zohocorpmanageengine_exchange_reporter_plusMatch5.75702

zohocorpmanageengine_exchange_reporter_plusMatch5.75703

zohocorpmanageengine_exchange_reporter_plusMatch5.75704

zohocorpmanageengine_exchange_reporter_plusMatch5.75705

zohocorpmanageengine_exchange_reporter_plusMatch5.75706

zohocorpmanageengine_exchange_reporter_plusMatch5.75707

VendorProductVersionCPE
zohocorpmanageengine_exchange_reporter_plus*cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5701:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5702:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5703:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5704:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5705:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5706:*:*:*:*:*:*
zohocorpmanageengine_exchange_reporter_plus5.7cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5707:*:*:*:*:*:*

Vendor	Product	Version	CPE
zohocorp	manageengine_exchange_reporter_plus	*	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus::::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5701::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5702::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5703::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5704::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5705::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5706::::::
zohocorp	manageengine_exchange_reporter_plus	5.7	cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5707::::::

References

www.manageengine.com/products/exchange-reports/advisory/CVE-2023-22624.html

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.008

Percentile

81.7%

JSON

Related for CVE-2023-22624