CVE-2019-12959

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine AssetExplorer versions 6.2.0 and earlier

Description A Server Side Request Forgery (SSRF) issue exists in the ClientUtilServlet servlet. This is due to a URL in a parameter that can be manipulated.

Recommendations For versions 6.2.0 and earlier, consider restricting access to the ClientUtilServlet servlet until a fix is available. As a temporary workaround, avoid using URLs in parameters for the affected servlet.