Not rated
CVE-2021-20080 Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer…
Description
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ManageEngine ServiceDesk Plus | Versions not published | |
| ManageEngine AssetExplorer | Versions not published |