VULNERABILITY INTELLIGENCE

CVE-2019-11677

CVSS score9.8 CRITICAL

EPSS probability9.36%

CISA KEVNot currently listed

Published2019-05-02

Last modified2026-06-17

Description

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.