CVE-2019-11677

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.

Date published : 2019-05-02

https://www.manageengine.com/products/firewall/release-notes.html