Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Manageengine_adselfservice_plus | Zohocorp | 5.7-4500 (including) | 5.7-4500 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5032 (including) | 5.7-5032 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5040 (including) | 5.7-5040 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5041 (including) | 5.7-5041 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5100 (including) | 5.7-5100 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5101 (including) | 5.7-5101 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5102 (including) | 5.7-5102 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5103 (including) | 5.7-5103 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5104 (including) | 5.7-5104 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5105 (including) | 5.7-5105 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5106 (including) | 5.7-5106 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5107 (including) | 5.7-5107 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5108 (including) | 5.7-5108 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5109 (including) | 5.7-5109 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5110 (including) | 5.7-5110 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5111 (including) | 5.7-5111 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5112 (including) | 5.7-5112 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5113 (including) | 5.7-5113 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5114 (including) | 5.7-5114 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5115 (including) | 5.7-5115 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5116 (including) | 5.7-5116 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5200 (including) | 5.7-5200 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5201 (including) | 5.7-5201 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5202 (including) | 5.7-5202 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5203 (including) | 5.7-5203 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5204 (including) | 5.7-5204 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5205 (including) | 5.7-5205 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5206 (including) | 5.7-5206 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5207 (including) | 5.7-5207 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5300 (including) | 5.7-5300 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5301 (including) | 5.7-5301 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5302 (including) | 5.7-5302 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5303 (including) | 5.7-5303 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5304 (including) | 5.7-5304 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5305 (including) | 5.7-5305 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5306 (including) | 5.7-5306 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5307 (including) | 5.7-5307 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5308 (including) | 5.7-5308 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5309 (including) | 5.7-5309 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5310 (including) | 5.7-5310 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5311 (including) | 5.7-5311 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5312 (including) | 5.7-5312 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5313 (including) | 5.7-5313 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5314 (including) | 5.7-5314 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5315 (including) | 5.7-5315 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5316 (including) | 5.7-5316 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5317 (including) | 5.7-5317 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5318 (including) | 5.7-5318 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5319 (including) | 5.7-5319 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5320 (including) | 5.7-5320 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5321 (including) | 5.7-5321 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5322 (including) | 5.7-5322 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5323 (including) | 5.7-5323 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5324 (including) | 5.7-5324 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5325 (including) | 5.7-5325 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5326 (including) | 5.7-5326 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5327 (including) | 5.7-5327 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5328 (including) | 5.7-5328 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5329 (including) | 5.7-5329 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5330 (including) | 5.7-5330 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5400 (including) | 5.7-5400 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5500 (including) | 5.7-5500 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5501 (including) | 5.7-5501 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5502 (including) | 5.7-5502 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5503 (including) | 5.7-5503 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5504 (including) | 5.7-5504 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5505 (including) | 5.7-5505 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5506 (including) | 5.7-5506 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5507 (including) | 5.7-5507 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5508 (including) | 5.7-5508 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5509 (including) | 5.7-5509 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5510 (including) | 5.7-5510 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5511 (including) | 5.7-5511 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5512 (including) | 5.7-5512 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5513 (including) | 5.7-5513 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5514 (including) | 5.7-5514 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5515 (including) | 5.7-5515 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5516 (including) | 5.7-5516 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5517 (including) | 5.7-5517 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5518 (including) | 5.7-5518 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5519 (including) | 5.7-5519 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5520 (including) | 5.7-5520 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5521 (including) | 5.7-5521 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5600 (including) | 5.7-5600 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5601 (including) | 5.7-5601 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5602 (including) | 5.7-5602 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5603 (including) | 5.7-5603 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5604 (including) | 5.7-5604 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5605 (including) | 5.7-5605 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5606 (including) | 5.7-5606 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5607 (including) | 5.7-5607 (including) |
| Manageengine_adselfservice_plus | Zohocorp | 5.7-5700 (including) | 5.7-5700 (including) |