admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-01 11:10:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-43473.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

848 B
Raw Blame History

CVE-2022-43473

Description

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.

POC

Reference

Github

No PoCs found on GitHub currently.