Security Advisory

CVE-2023-4769

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-11-03 10:55:13
Last updated 2024-09-05 18:05:51
Assigner INCIBE
State PUBLISHED

Description

A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.