A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: talos

Published: 2023-03-30T16:28:35.983Z

Updated: 2023-03-30T16:28:35.983Z

Reserved: 2022-12-05T20:53:36.058Z


Link: CVE-2022-43473

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2023-03-30T17:15:06.750

Modified: 2023-11-07T03:53:49.523


Link: CVE-2022-43473

JSON object: View

cve-icon Redhat Information

No data.

CWE