Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrary remote FTP server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zoho ManageEngine Network Configuration Manager和OpManager 安全漏洞
Vulnerability Description
ZOHO ManageEngine Network Configuration Manager和OpManager都是美国卓豪（ZOHO）公司的产品。ZOHO ManageEngine Network Configuration Manager是一套用于配置交换机、路由器、防火墙和其他网络设备的网络配置管理、网络变更和配置管理（NCCM）软件。OpManager是一套网络、服务器及虚拟化监控软件。该软件提供监视配置、告警和通知、监控报表等功能。 Zoho ManageEngine Network Conf
CVSS Information
N/A
Vulnerability Type
N/A