CVE-2023-35786
MediumCVSS 4.9Exploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to sensitive data within the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade Zoho ManageEngine ADManager Plus to version 7183 or later to mitigate this vulnerability.
Other vulnerabilities in Zoho ManageEngine ADManager Plus
See all- CVE-2023-39912Medium
Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.
- CVE-2023-38332Medium
Zoho ManageEngine ADManager Plus version 7201 allows authenticated users to take over another user's account via sensitive information disclosure.
Original NVD description (English source)
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS