CVE-2018-20664: XEE
Published Jan 3, 2019
·Updated
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
Affected Software
92 affected components
ZohoCorp ManageEngine ADSelfService Plus=5.7-4500
ZohoCorp ManageEngine ADSelfService Plus=5.7-5032
ZohoCorp ManageEngine ADSelfService Plus=5.7-5040
ZohoCorp ManageEngine ADSelfService Plus=5.7-5041
ZohoCorp ManageEngine ADSelfService Plus=5.7-5100
ZohoCorp ManageEngine ADSelfService Plus=5.7-5101
ZohoCorp ManageEngine ADSelfService Plus=5.7-5102
ZohoCorp ManageEngine ADSelfService Plus=5.7-5103
ZohoCorp ManageEngine ADSelfService Plus=5.7-5104
ZohoCorp ManageEngine ADSelfService Plus=5.7-5105
ZohoCorp ManageEngine ADSelfService Plus=5.7-5106
ZohoCorp ManageEngine ADSelfService Plus=5.7-5107
ZohoCorp ManageEngine ADSelfService Plus=5.7-5108
ZohoCorp ManageEngine ADSelfService Plus=5.7-5109
ZohoCorp ManageEngine ADSelfService Plus=5.7-5110
ZohoCorp ManageEngine ADSelfService Plus=5.7-5111
ZohoCorp ManageEngine ADSelfService Plus=5.7-5112
ZohoCorp ManageEngine ADSelfService Plus=5.7-5113
ZohoCorp ManageEngine ADSelfService Plus=5.7-5114
ZohoCorp ManageEngine ADSelfService Plus=5.7-5115
ZohoCorp ManageEngine ADSelfService Plus=5.7-5116
ZohoCorp ManageEngine ADSelfService Plus=5.7-5200
ZohoCorp ManageEngine ADSelfService Plus=5.7-5201
ZohoCorp ManageEngine ADSelfService Plus=5.7-5202
ZohoCorp ManageEngine ADSelfService Plus=5.7-5203
ZohoCorp ManageEngine ADSelfService Plus=5.7-5204
ZohoCorp ManageEngine ADSelfService Plus=5.7-5205
ZohoCorp ManageEngine ADSelfService Plus=5.7-5206
ZohoCorp ManageEngine ADSelfService Plus=5.7-5207
ZohoCorp ManageEngine ADSelfService Plus=5.7-5300
ZohoCorp ManageEngine ADSelfService Plus=5.7-5301
ZohoCorp ManageEngine ADSelfService Plus=5.7-5302
ZohoCorp ManageEngine ADSelfService Plus=5.7-5303
ZohoCorp ManageEngine ADSelfService Plus=5.7-5304
ZohoCorp ManageEngine ADSelfService Plus=5.7-5305
ZohoCorp ManageEngine ADSelfService Plus=5.7-5306
ZohoCorp ManageEngine ADSelfService Plus=5.7-5307
ZohoCorp ManageEngine ADSelfService Plus=5.7-5308
ZohoCorp ManageEngine ADSelfService Plus=5.7-5309
ZohoCorp ManageEngine ADSelfService Plus=5.7-5310
ZohoCorp ManageEngine ADSelfService Plus=5.7-5311
ZohoCorp ManageEngine ADSelfService Plus=5.7-5312
ZohoCorp ManageEngine ADSelfService Plus=5.7-5313
ZohoCorp ManageEngine ADSelfService Plus=5.7-5314
ZohoCorp ManageEngine ADSelfService Plus=5.7-5315
ZohoCorp ManageEngine ADSelfService Plus=5.7-5316
ZohoCorp ManageEngine ADSelfService Plus=5.7-5317
ZohoCorp ManageEngine ADSelfService Plus=5.7-5318
ZohoCorp ManageEngine ADSelfService Plus=5.7-5319
ZohoCorp ManageEngine ADSelfService Plus=5.7-5320
ZohoCorp ManageEngine ADSelfService Plus=5.7-5321
ZohoCorp ManageEngine ADSelfService Plus=5.7-5322
ZohoCorp ManageEngine ADSelfService Plus=5.7-5323
ZohoCorp ManageEngine ADSelfService Plus=5.7-5324
ZohoCorp ManageEngine ADSelfService Plus=5.7-5325
ZohoCorp ManageEngine ADSelfService Plus=5.7-5326
ZohoCorp ManageEngine ADSelfService Plus=5.7-5327
ZohoCorp ManageEngine ADSelfService Plus=5.7-5328
ZohoCorp ManageEngine ADSelfService Plus=5.7-5329
ZohoCorp ManageEngine ADSelfService Plus=5.7-5330
ZohoCorp ManageEngine ADSelfService Plus=5.7-5400
ZohoCorp ManageEngine ADSelfService Plus=5.7-5500
ZohoCorp ManageEngine ADSelfService Plus=5.7-5501
ZohoCorp ManageEngine ADSelfService Plus=5.7-5502
ZohoCorp ManageEngine ADSelfService Plus=5.7-5503
ZohoCorp ManageEngine ADSelfService Plus=5.7-5504
ZohoCorp ManageEngine ADSelfService Plus=5.7-5505
ZohoCorp ManageEngine ADSelfService Plus=5.7-5506
ZohoCorp ManageEngine ADSelfService Plus=5.7-5507
ZohoCorp ManageEngine ADSelfService Plus=5.7-5508
ZohoCorp ManageEngine ADSelfService Plus=5.7-5509
ZohoCorp ManageEngine ADSelfService Plus=5.7-5510
ZohoCorp ManageEngine ADSelfService Plus=5.7-5511
ZohoCorp ManageEngine ADSelfService Plus=5.7-5512
ZohoCorp ManageEngine ADSelfService Plus=5.7-5513
ZohoCorp ManageEngine ADSelfService Plus=5.7-5514
ZohoCorp ManageEngine ADSelfService Plus=5.7-5515
ZohoCorp ManageEngine ADSelfService Plus=5.7-5516
ZohoCorp ManageEngine ADSelfService Plus=5.7-5517
ZohoCorp ManageEngine ADSelfService Plus=5.7-5518
ZohoCorp ManageEngine ADSelfService Plus=5.7-5519
ZohoCorp ManageEngine ADSelfService Plus=5.7-5520
ZohoCorp ManageEngine ADSelfService Plus=5.7-5521
ZohoCorp ManageEngine ADSelfService Plus=5.7-5600
ZohoCorp ManageEngine ADSelfService Plus=5.7-5601
ZohoCorp ManageEngine ADSelfService Plus=5.7-5602
ZohoCorp ManageEngine ADSelfService Plus=5.7-5603
ZohoCorp ManageEngine ADSelfService Plus=5.7-5604
ZohoCorp ManageEngine ADSelfService Plus=5.7-5605
ZohoCorp ManageEngine ADSelfService Plus=5.7-5606
ZohoCorp ManageEngine ADSelfService Plus=5.7-5607
ZohoCorp ManageEngine ADSelfService Plus=5.7-5700
Event History
Jan 3, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-20664 vulnerability about?
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
2
How severe is CVE-2018-20664?
The severity of CVE-2018-20664 is rated as critical with a CVSS score of 9.8.
3
Which software versions are affected by CVE-2018-20664?
Zoho ManageEngine ADSelfService Plus versions 5.7-4500 to 5.7-5700 are affected by CVE-2018-20664.
4
Where can I find more information about CVE-2018-20664 vulnerability?
You can find more information about CVE-2018-20664 vulnerability at excellium-services.com and manageengine.com.