CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.
CVE
CVE-2019-11677
Severity
CRITICAL
CVSS
9.8
EPSS
9.36%
Original NVD Description
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)