virus logo FortiClient Vulnerability

ManageEngine Desktop Central CVE-2020-8540 XML External Entity Vulnerability

description-logoDescription

An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

affected-products-logoAffected Applications

ManageEngine Desktop Central

CVE References

CVE-2020-8540

Other References

https://www.manageengine.com/products/desktop-central/knowledge-base.html
ID 71037
Created Feb 10, 2022
Description
Updated		 Dec 18, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Zoho
Patch manual
Application ManageEngine Desktop Central