Non notée
CVE-2021-20080 Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer…
Description
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ManageEngine ServiceDesk Plus | Versions non publiées | |
| ManageEngine AssetExplorer | Versions non publiées |