CVE-2019-14693 XML external entity in n/a

What is CVE-2019-14693?

CVE-2019-14693 is a high-severity vulnerability in n/a, published on 8 Aug 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Weakness: CWE-611

Which versions are affected by CVE-2019-14693?

It affects 1 product.

Products include Zohocorp Manageengine Assetexplorer.

How do I fix CVE-2019-14693?

No fix has been published for CVE-2019-14693 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-14693 being exploited?

There is no known exploitation of CVE-2019-14693 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-20110 Integer overflow in Manage Engine Asset Explorer Agent Critical 9.8
• CVE-2019-12994 Server-side request forgery in n/a Critical 9.1
• CVE-2019-12959 Server-side request forgery in n/a High 8.8
• CVE-2023-26601 Denial of service in n/a High 7.5
• CVE-2022-35403 Information disclosure in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f3vc-r644-7vfr.