CVE-2023-4769mediumCWE-918

CVE-2023-4769: falha de média gravidade em ManageEngine Desktop Central

Server-Side Request Forgery in ManageEngine Desktop Central

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Desktop Central

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.6epss 3.9%
A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ManageEngine · Desktop Central
CVEs relacionadas — ManageEngine Desktop Central

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4768MEDIUMImproper Neutralization of CRLF Sequences in ManageEngine Desktop CentralEPSS 3.5%CVE-2023-4767MEDIUMImproper Neutralization of CRLF Sequences in ManageEngine Desktop CentralEPSS 3.5%