CVE-2019-11677

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-05-02

Last modified

2024-08-04

Weaknesses

CWE-611

Affected products

• Manageengine Firewall Analyzer (Zohocorp)

References

• https://www.manageengine.com/products/firewall/release-notes.html