CVE-2023-4769CWE-918

Server-Side Request Forgery in ManageEngine Desktop Central

Medium · published November 3, 2023

CVSS v3.1
6.6
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03251 · 88.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-11-03T10:55Z
EPSS history
Timeline
  • 03 NOV 10:55Z
    Server-Side Request Forgery in ManageEngine Desktop Central
    cvelistv5