all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
all InfoSec news

Vulnerability Spotlight: Vulnerability in ManageEngine OpManager could lead to XXE attack

Add to bookmarks
March 30, 2023, 7 p.m. | Jonathan Munshaw

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence blog.talosintelligence.com

XXE attacks allow an adversary to interact with other backend or external systems that OpManager accesses.

adversary attack attacks backend external manageengine manageengine opmanager opmanager spotlight systems vulnerability vulnerability spotlight xxe

Visit resource

More from blog.talosintelligence.com / Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

What can we learn from the passwords used in brute-force attacks? 3 days, 17 hours ago | blog.talosintelligence.com
attacks brute brute-force can +5
Vulnerabilities in employee management system could lead to remote code execution, login credential theft 4 days, 19 hours ago | blog.talosintelligence.com
code code execution credential credential theft +21
Cisco Talos at RSAC 2024 5 days, 23 hours ago | blog.talosintelligence.com
announcements cisco cisco talos cybersecurity +12
James Nutland studies what makes threat actors tick, growing our understanding of the current APT … 6 days, 23 hours ago | blog.talosintelligence.com
adversary apt can current +14
The private sector probably isn’t coming to save the NVD 1 week, 3 days ago | blog.talosintelligence.com
arcanedoor coming cybercrime isn +9
Talos IR trends: BEC attacks surge, while weaknesses in MFA persist 1 week, 3 days ago | blog.talosintelligence.com
adversaries attacks bec bec attacks +17
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices 1 week, 4 days ago | blog.talosintelligence.com
apt campaign campaigns devices +15
Suspected CoralRaider continues to expand victimology using three information stealers 1 week, 5 days ago | blog.talosintelligence.com
apt argument bypass command +17
What’s the deal with the massive backlog of vulnerabilities at the NVD? 2 weeks, 2 days ago | blog.talosintelligence.com
backlog current deal management +10

Jobs in InfoSec / Cybersecurity

Post a job on infosec-jobs.com Find talent on infosec-jobs.com

Head of Security Operations

@ Canonical Ltd. | Home based - Americas, EMEA
View on infosec-jobs.com

Security Specialist

@ Lely | Maassluis, Netherlands
View on infosec-jobs.com

Senior Cyber Incident Response (Hybrid)

@ SmartDev | Cầu Giấy, Vietnam
View on infosec-jobs.com

Sr Security Engineer - Colombia

@ Nubank | Colombia, Bogota
View on infosec-jobs.com

Security Engineer, Investigations - i3

@ Meta | Menlo Park, CA | Washington, DC | Remote, US
View on infosec-jobs.com

Cyber Security Engineer

@ ASSYSTEM | Bridgwater, United Kingdom
View on infosec-jobs.com
View more jobs