CVE-2024-10839CWE-611

XML External Entity

High · published November 8, 2024

CVSS v3.1
8.5
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02385 · 83.8th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2024-11-08T10:58Z
EPSS history
Timeline
  • 08 NOV 10:58Z
    XML External Entity
    cvelistv5