Vulnerabilities > CVE-2023-22624 - XXE vulnerability in Zohocorp Manageengine Exchange Reporter Plus

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
zohocorp
CWE-611

Summary

Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.