critical9.8
CVE-2018-20664
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
Impact
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Adselfservice Plus | Version 5.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20664/
- https://www.manageengine.com/products/self-service-password/release-notes.html#5701
- https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20664/
- https://www.manageengine.com/products/self-service-password/release-notes.html#5701