CVE Catalog
CVE-2023-35786
MediumCVSS 4.9Exploitation Probability (EPSS)
High risk2.51%
83th percentile - higher than 83% of all known CVEs
Summary
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to sensitive data within the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade Zoho ManageEngine ADManager Plus to version 7183 or later to mitigate this vulnerability.
Original NVD description (English source)
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.