CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.5 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
ManageEngineCNA
8.5 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
VendorProductVersion
zohocorpmanageengine_sharepoint_manager_plus
4.0:4000
zohocorpmanageengine_sharepoint_manager_plus
4.0:4001
zohocorpmanageengine_sharepoint_manager_plus
4.0:4002
zohocorpmanageengine_sharepoint_manager_plus
4.0:4003
zohocorpmanageengine_sharepoint_manager_plus
4.0:4004
zohocorpmanageengine_sharepoint_manager_plus
4.0:4005
zohocorpmanageengine_sharepoint_manager_plus
4.0:4006
zohocorpmanageengine_sharepoint_manager_plus
4.0:4007
zohocorpmanageengine_sharepoint_manager_plus
4.0:4008
zohocorpmanageengine_sharepoint_manager_plus
4.0:4009
zohocorpmanageengine_sharepoint_manager_plus
4.0:4010
zohocorpmanageengine_sharepoint_manager_plus
4.0:4011
zohocorpmanageengine_sharepoint_manager_plus
4.0:4012
zohocorpmanageengine_sharepoint_manager_plus
4.0:4013
zohocorpmanageengine_sharepoint_manager_plus
4.0:4014
zohocorpmanageengine_sharepoint_manager_plus
4.0:4015
zohocorpmanageengine_sharepoint_manager_plus
4.0:4016
zohocorpmanageengine_sharepoint_manager_plus
4.0:4017
zohocorpmanageengine_sharepoint_manager_plus
4.0:4018
zohocorpmanageengine_sharepoint_manager_plus
4.0:4019
zohocorpmanageengine_sharepoint_manager_plus
4.0:4020
zohocorpmanageengine_sharepoint_manager_plus
4.0:4021
zohocorpmanageengine_sharepoint_manager_plus
4.0:4022
zohocorpmanageengine_sharepoint_manager_plus
4.0:4023
zohocorpmanageengine_sharepoint_manager_plus
4.0:4024
zohocorpmanageengine_sharepoint_manager_plus
4.0:4025
zohocorpmanageengine_sharepoint_manager_plus
4.0:4026
zohocorpmanageengine_sharepoint_manager_plus
4.0:4027
zohocorpmanageengine_sharepoint_manager_plus
4.0:4028
zohocorpmanageengine_sharepoint_manager_plus
4.0:4029
zohocorpmanageengine_sharepoint_manager_plus
4.0:4030
zohocorpmanageengine_sharepoint_manager_plus
4.0:4031
zohocorpmanageengine_sharepoint_manager_plus
4.0:4032
zohocorpmanageengine_sharepoint_manager_plus
4.0:4033
zohocorpmanageengine_sharepoint_manager_plus
4.1:4100
zohocorpmanageengine_sharepoint_manager_plus
4.1:4101
zohocorpmanageengine_sharepoint_manager_plus
4.1:4102
zohocorpmanageengine_sharepoint_manager_plus
4.1:4103
zohocorpmanageengine_sharepoint_manager_plus
4.1:4104
zohocorpmanageengine_sharepoint_manager_plus
4.1:4105
zohocorpmanageengine_sharepoint_manager_plus
4.1:4106
zohocorpmanageengine_sharepoint_manager_plus
4.1:4107
zohocorpmanageengine_sharepoint_manager_plus
4.1:4108
zohocorpmanageengine_sharepoint_manager_plus
4.1:4109
zohocorpmanageengine_sharepoint_manager_plus
4.1:4110
zohocorpmanageengine_sharepoint_manager_plus
4.2:4200
zohocorpmanageengine_sharepoint_manager_plus
4.2:4201
zohocorpmanageengine_sharepoint_manager_plus
4.3:4300
zohocorpmanageengine_sharepoint_manager_plus
4.3:4301
zohocorpmanageengine_sharepoint_manager_plus
4.3:4302
zohocorpmanageengine_sharepoint_manager_plus
4.3:4303
zohocorpmanageengine_sharepoint_manager_plus
4.3:4304
zohocorpmanageengine_sharepoint_manager_plus
4.3:4305
zohocorpmanageengine_sharepoint_manager_plus
4.3:4306
zohocorpmanageengine_sharepoint_manager_plus
4.3:4307
zohocorpmanageengine_sharepoint_manager_plus
4.3:4308
zohocorpmanageengine_sharepoint_manager_plus
4.3:4309
zohocorpmanageengine_sharepoint_manager_plus
4.3:4310
zohocorpmanageengine_sharepoint_manager_plus
4.3:4311
zohocorpmanageengine_sharepoint_manager_plus
4.3:4312
zohocorpmanageengine_sharepoint_manager_plus
4.3:4313
zohocorpmanageengine_sharepoint_manager_plus
4.3:4314
zohocorpmanageengine_sharepoint_manager_plus
4.3:4315
zohocorpmanageengine_sharepoint_manager_plus
4.3:4316
zohocorpmanageengine_sharepoint_manager_plus
4.3:4317
zohocorpmanageengine_sharepoint_manager_plus
4.3:4318
zohocorpmanageengine_sharepoint_manager_plus
4.3:4319
zohocorpmanageengine_sharepoint_manager_plus
4.3:4320
zohocorpmanageengine_sharepoint_manager_plus
4.3:4321
zohocorpmanageengine_sharepoint_manager_plus
4.3:4322
zohocorpmanageengine_sharepoint_manager_plus
4.3:4323
zohocorpmanageengine_sharepoint_manager_plus
4.3:4324
zohocorpmanageengine_sharepoint_manager_plus
4.3:4325
zohocorpmanageengine_sharepoint_manager_plus
4.3:4326
zohocorpmanageengine_sharepoint_manager_plus
4.3:4327
zohocorpmanageengine_sharepoint_manager_plus
4.3:4328
zohocorpmanageengine_sharepoint_manager_plus
4.3:4329
zohocorpmanageengine_sharepoint_manager_plus
4.3:4330
zohocorpmanageengine_sharepoint_manager_plus
4.3:4331
zohocorpmanageengine_sharepoint_manager_plus
4.3:4332
zohocorpmanageengine_sharepoint_manager_plus
4.3:4333
zohocorpmanageengine_sharepoint_manager_plus
4.4:4400
zohocorpmanageengine_sharepoint_manager_plus
4.4:4401
zohocorpmanageengine_sharepoint_manager_plus
4.4:4402
zohocorpmanageengine_sharepoint_manager_plus
4.4:4403
zohocorpmanageengine_sharepoint_manager_plus
4.4:4404
zohocorpmanageengine_sharepoint_manager_plus
4.5:4500
zohocorpmanageengine_sharepoint_manager_plus
4.5:4501
zohocorpmanageengine_sharepoint_manager_plus
4.5:4502
zohocorpmanageengine_sharepoint_manager_plus
4.5:4503
𝑥
= Vulnerable software versions