// For flags

CVE-2022-43473

 

Severity Score

5.4
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve
a malicious XML payload to trigger this vulnerability.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-12-05 CVE Reserved
  • 2023-03-30 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-08-03 First Exploit
  • 2024-10-20 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-611: Improper Restriction of XML External Entity Reference
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
< 12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version " < 12.6"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126000
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126004
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126005
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126100
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126101
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126102
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126103
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126104
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126107
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126108
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126109
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126110
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126113
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126114
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126115
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126116
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126117
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126118
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126119
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126120
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126121
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126122
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126130
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126131
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126132
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126134
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126135
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126136
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126139
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126141
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126147
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126148
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126149
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126150
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126151
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126154
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126155
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126162
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126163
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126164
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126165
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126166
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126167
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"
build126168
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
< 12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version " < 12.6"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126100
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126103
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126104
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126107
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126113
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126117
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126119
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126122
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126139
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126140
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126141
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126154
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126155
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Plus
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"
build126264
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
< 12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version " < 12.6"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126100
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126103
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126104
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126107
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126113
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126117
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126119
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126122
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126139
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126140
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126141
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126154
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126155
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager Msp
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"
12.6
Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"
build126264
Affected