CVE-2023-29443 (published 2023-04-26T00:00:00)
Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a