CVE-2022-43473

zohocorp manageengine opmanager, zohocorp manageengine opmanager plus

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-43473

Katalog CVE

CVSS 5.4 · Medium EPSS 19,8%

Kerentanan Improper Restriction of XML External Entity Reference pada zohocorp manageengine opmanager, zohocorp manageengine opmanager plus. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.

Rincian

Terbit di NVD
30 Maret 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-611: Improper Restriction of XML External Entity Reference
EPSS (30 hari)
19,8% peluang dieksploitasi; lebih tinggi dari 97,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine opmanager Semua versi sebelum 12.6
zohocorp manageengine opmanager Versi 12.6 build126000
zohocorp manageengine opmanager Versi 12.6 build126001
zohocorp manageengine opmanager Versi 12.6 build126002
zohocorp manageengine opmanager Versi 12.6 build126004
zohocorp manageengine opmanager Versi 12.6 build126005
zohocorp manageengine opmanager Versi 12.6 build126100
zohocorp manageengine opmanager Versi 12.6 build126101
zohocorp manageengine opmanager Versi 12.6 build126102
zohocorp manageengine opmanager Versi 12.6 build126103
zohocorp manageengine opmanager Versi 12.6 build126104
zohocorp manageengine opmanager Versi 12.6 build126107
zohocorp manageengine opmanager Versi 12.6 build126108
zohocorp manageengine opmanager Versi 12.6 build126109
zohocorp manageengine opmanager Versi 12.6 build126110
zohocorp manageengine opmanager Versi 12.6 build126113
zohocorp manageengine opmanager Versi 12.6 build126114
zohocorp manageengine opmanager Versi 12.6 build126115
zohocorp manageengine opmanager Versi 12.6 build126116
zohocorp manageengine opmanager Versi 12.6 build126117
zohocorp manageengine opmanager Versi 12.6 build126118
zohocorp manageengine opmanager Versi 12.6 build126119
zohocorp manageengine opmanager Versi 12.6 build126120
zohocorp manageengine opmanager Versi 12.6 build126121
zohocorp manageengine opmanager Versi 12.6 build126122
zohocorp manageengine opmanager Versi 12.6 build126130
zohocorp manageengine opmanager Versi 12.6 build126131
zohocorp manageengine opmanager Versi 12.6 build126132
zohocorp manageengine opmanager Versi 12.6 build126134
zohocorp manageengine opmanager Versi 12.6 build126135
zohocorp manageengine opmanager Versi 12.6 build126136
zohocorp manageengine opmanager Versi 12.6 build126139
zohocorp manageengine opmanager Versi 12.6 build126141
zohocorp manageengine opmanager Versi 12.6 build126147
zohocorp manageengine opmanager Versi 12.6 build126148
zohocorp manageengine opmanager Versi 12.6 build126149
zohocorp manageengine opmanager Versi 12.6 build126150
zohocorp manageengine opmanager Versi 12.6 build126151
zohocorp manageengine opmanager Versi 12.6 build126154
zohocorp manageengine opmanager Versi 12.6 build126155
zohocorp manageengine opmanager Versi 12.6 build126162
zohocorp manageengine opmanager Versi 12.6 build126163
zohocorp manageengine opmanager Versi 12.6 build126164
zohocorp manageengine opmanager Versi 12.6 build126165
zohocorp manageengine opmanager Versi 12.6 build126166
zohocorp manageengine opmanager Versi 12.6 build126167
zohocorp manageengine opmanager Versi 12.6 build126168
zohocorp manageengine opmanager plus Semua versi sebelum 12.6
zohocorp manageengine opmanager plus Versi 12.6 build126001
zohocorp manageengine opmanager plus Versi 12.6 build126002
zohocorp manageengine opmanager plus Versi 12.6 build126100
zohocorp manageengine opmanager plus Versi 12.6 build126103
zohocorp manageengine opmanager plus Versi 12.6 build126104
zohocorp manageengine opmanager plus Versi 12.6 build126107
zohocorp manageengine opmanager plus Versi 12.6 build126113
zohocorp manageengine opmanager plus Versi 12.6 build126117
zohocorp manageengine opmanager plus Versi 12.6 build126119
zohocorp manageengine opmanager plus Versi 12.6 build126122
zohocorp manageengine opmanager plus Versi 12.6 build126139
zohocorp manageengine opmanager plus Versi 12.6 build126140

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 81 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.