A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2023-03-30T16:28:35.983Z

Updated: 2024-08-03T13:32:59.643Z

Reserved: 2022-12-05T20:53:36.058Z

Link: CVE-2022-43473

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-03-30T17:15:06.750

Modified: 2023-11-07T03:53:49.523

Link: CVE-2022-43473

cve-icon Redhat

No data.