2019-08-08 20:15:10 2019-08-16 18:47:09

Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
zohocorp ManageEngine Asset Explorer 4.0 Build 4001 zohocorp ManageEngine Asset Explorer 4.0 Build 4002 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4004 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4005 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4008 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4009 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4010 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4011 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4012 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4013 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4014 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4015 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4016 zohocorp ManageEngine Asset Explorer 4.0 Service Pack 4017 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5000 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5001 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5002 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5003 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5004 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5005 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5100 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5101 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5102 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5103 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5500 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5501 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5502 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5503 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5504 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5600 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5601 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5602 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5603 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5604 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5605 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5606 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5607 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5608 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5609 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5610 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5611 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5612 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5613 zohocorp ManageEngine Asset Explorer 5.6 Service Pack 5614 Zohocorp Manageengine assetexplorer 6.1 (not an official CPE)