CVE-2023-35786: XEE
Published Jul 5, 2023
·Updated
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
Affected Software
36 affected components
ZohoCorp ManageEngine ADManager Plus<7.1
ZohoCorp ManageEngine ADManager Plus=7.1
ZohoCorp ManageEngine ADManager Plus=7.1-7100
ZohoCorp ManageEngine ADManager Plus=7.1-7101
ZohoCorp ManageEngine ADManager Plus=7.1-7102
ZohoCorp ManageEngine ADManager Plus=7.1-7110
ZohoCorp ManageEngine ADManager Plus=7.1-7111
ZohoCorp ManageEngine ADManager Plus=7.1-7112
ZohoCorp ManageEngine ADManager Plus=7.1-7113
ZohoCorp ManageEngine ADManager Plus=7.1-7114
ZohoCorp ManageEngine ADManager Plus=7.1-7115
ZohoCorp ManageEngine ADManager Plus=7.1-7116
ZohoCorp ManageEngine ADManager Plus=7.1-7117
ZohoCorp ManageEngine ADManager Plus=7.1-7118
ZohoCorp ManageEngine ADManager Plus=7.1-7120
ZohoCorp ManageEngine ADManager Plus=7.1-7121
ZohoCorp ManageEngine ADManager Plus=7.1-7122
ZohoCorp ManageEngine ADManager Plus=7.1-7123
ZohoCorp ManageEngine ADManager Plus=7.1-7124
ZohoCorp ManageEngine ADManager Plus=7.1-7125
ZohoCorp ManageEngine ADManager Plus=7.1-7126
ZohoCorp ManageEngine ADManager Plus=7.1-7130
ZohoCorp ManageEngine ADManager Plus=7.1-7131
ZohoCorp ManageEngine ADManager Plus=7.1-7140
ZohoCorp ManageEngine ADManager Plus=7.1-7141
ZohoCorp ManageEngine ADManager Plus=7.1-7150
ZohoCorp ManageEngine ADManager Plus=7.1-7151
ZohoCorp ManageEngine ADManager Plus=7.1-7160
ZohoCorp ManageEngine ADManager Plus=7.1-7161
ZohoCorp ManageEngine ADManager Plus=7.1-7162
ZohoCorp ManageEngine ADManager Plus=7.1-7163
ZohoCorp ManageEngine ADManager Plus=7.1-7170
ZohoCorp ManageEngine ADManager Plus=7.1-7171
ZohoCorp ManageEngine ADManager Plus=7.1-7180
ZohoCorp ManageEngine ADManager Plus=7.1-7181
ZohoCorp ManageEngine ADManager Plus=7.1-7182
Event History
Jul 5, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-35786?
CVE-2023-35786 is a vulnerability in Zoho ManageEngine ADManager Plus that allows admin users to exploit an XXE issue to view files.
2
How does CVE-2023-35786 affect Zoho ManageEngine ADManager Plus?
CVE-2023-35786 affects Zoho ManageEngine ADManager Plus by allowing admin users to exploit an XXE issue to view files.
3
Is Zoho ManageEngine ADManager Plus version 7.1 affected by CVE-2023-35786?
Yes, Zoho ManageEngine ADManager Plus version 7.1 is affected by CVE-2023-35786.
4
What is the severity of CVE-2023-35786?
CVE-2023-35786 has a severity rating of medium (4.9).
5
How can I fix CVE-2023-35786 in Zoho ManageEngine ADManager Plus?
To fix CVE-2023-35786 in Zoho ManageEngine ADManager Plus, update to a version that is higher than 7.1.