Security Advisory

CVE-2019-11677

9.8
CRITICAL

Vulnerability Description

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.
Published Date May 2, 2019
Official Source NIST NVD Advisory