Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote attacker to conduct persistent XSS attacks
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
![]() | ManageEngine AssentExplorer < 6.8 Unauthenticated Stored XSS | 12 Apr 202100:00 | – | nessus |
![]() | ManageEngine ServiceDesk Plus < 11.2 Build 11200 Unauthenticated Stored XSS | 12 Apr 202100:00 | – | nessus |
![]() | CVE-2021-20080 | 9 Apr 202118:15 | – | nvd |
![]() | Zoho ManageEngine ServiceDesk Plus Cross-Site Scripting (CVE-2021-20080) | 20 Nov 202200:00 | – | checkpoint_advisories |
![]() | CVE-2021-20080 | 9 Apr 202117:21 | – | cvelist |
![]() | Cross site scripting | 9 Apr 202118:15 | – | prion |
[
{
"product": "ManageEngine ServiceDesk Plus",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Before 11200"
}
]
},
{
"product": "ManageEngine AssetExplorer",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Before 6800"
}
]
}
]
Source | Link |
---|---|
tenable | www.tenable.com/security/research/tra-2021-11 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo