CVE:CVE-2023-22624
CNNVD:CNNVD-202301-1301
ZOHO ManageEngine Exchange Reporter是美国卓豪（ZOHO）公司的混合 Exchange 和 Skype for Business的报告、审计和监控解决方案。
ZOHO ManageEngine Exchange Reporter Plus 5708 版本之前存在安全漏洞，该漏洞源于存在 XML 外部实体注入问题。
solution:Upgrade zohocorp manageengine_exchange_reporter_plus to a higher version than 5.7,5.7:5700,5.7:5701,5.7:5702,5.7:5703,5.7:5704,5.7:5705,5.7:5706,5.7:5707,and avoid the version (,5.7),5.7:5700,5.7:5701,5.7:5702,5.7:5703,5.7:5704,5.7:5705,5.7:5706,5.7:5707