CVE-2022-43473

Severity Score

5.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

Poc

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2022-12-05 CVE Reserved
2023-03-30 CVE Published
2025-02-11 CVE Updated
2025-02-11 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-611: Improper Restriction of XML External Entity Reference

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1685	2025-02-11

URL	Date	SRC
https://www.manageengine.com/itom/advisory/cve-2022-43473.html	2023-11-07

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				< 12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version " < 12.6"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126000		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126001		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126002		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126004		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126005		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126100		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126101		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126102		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126103		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126104		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126107		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126108		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126109		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126110		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126113		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126114		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126115		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126116		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126117		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126118		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126119		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126120		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126121		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126122		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126130		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126131		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126132		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126134		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126135		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126136		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126139		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126141		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126147		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126148		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126149		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126150		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126151		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126154		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126155		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126162		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126163		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126164		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126165		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126166		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126167		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.6"		build126168		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				< 12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version " < 12.6"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126001		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126002		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126100		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126103		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126104		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126107		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126113		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126117		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126119		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126122		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126139		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126140		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126141		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126154		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126155		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Plus Search vendor "Zohocorp" for product "Manageengine Opmanager Plus"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Plus" and version "12.6"		build126264		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				< 12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version " < 12.6"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126001		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126002		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126100		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126103		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126104		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126107		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126113		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126117		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126119		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126122		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126139		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126140		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126141		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126154		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126155		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Msp Search vendor "Zohocorp" for product "Manageengine Opmanager Msp"				12.6 Search vendor "Zohocorp" for product "Manageengine Opmanager Msp" and version "12.6"		build126264		Affected