CVE-2024-10839

Name of the Vulnerable Software and Affected Versions ManageEngine SharePoint Manager Plus versions 4503 and prior

Description The issue is an authenticated XML External Entity (XXE) vulnerability in the Management option. This vulnerability impacts specific versions of the software, allowing potential exploitation. Users are urged to update to the latest versions and follow remediation guidelines to mitigate risks.

Recommendations For ManageEngine SharePoint Manager Plus versions 4503 and prior, update to the latest version to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to the Management option until a patch is available.