Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Manageengine_admanager_plus | Zohocorp | * | 7.1 (excluding) |
| Manageengine_admanager_plus | Zohocorp | 7.1 (including) | 7.1 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7100 (including) | 7.1-7100 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7101 (including) | 7.1-7101 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7102 (including) | 7.1-7102 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7110 (including) | 7.1-7110 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7111 (including) | 7.1-7111 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7112 (including) | 7.1-7112 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7113 (including) | 7.1-7113 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7114 (including) | 7.1-7114 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7115 (including) | 7.1-7115 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7116 (including) | 7.1-7116 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7117 (including) | 7.1-7117 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7118 (including) | 7.1-7118 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7120 (including) | 7.1-7120 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7121 (including) | 7.1-7121 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7122 (including) | 7.1-7122 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7123 (including) | 7.1-7123 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7124 (including) | 7.1-7124 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7125 (including) | 7.1-7125 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7126 (including) | 7.1-7126 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7130 (including) | 7.1-7130 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7131 (including) | 7.1-7131 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7140 (including) | 7.1-7140 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7141 (including) | 7.1-7141 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7150 (including) | 7.1-7150 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7151 (including) | 7.1-7151 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7160 (including) | 7.1-7160 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7161 (including) | 7.1-7161 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7162 (including) | 7.1-7162 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7163 (including) | 7.1-7163 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7170 (including) | 7.1-7170 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7171 (including) | 7.1-7171 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7180 (including) | 7.1-7180 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7181 (including) | 7.1-7181 (including) |
| Manageengine_admanager_plus | Zohocorp | 7.1-7182 (including) | 7.1-7182 (including) |