← Database

CVE-2022-43473

MEDIUM CVSS: 5.8 Published: 2023-03-30 Modified: 2026-06-17

Description

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.

Affected Platforms

Zohocorp Manageengine Opmanager MspZohocorp Manageengine Opmanager PlusZohocorp Manageengine Opmanager

Weakness Type

CWE-611

References