Lucene search
HistoryApr 09, 2021 - 6:15 p.m.
CVE-2021-20080
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.033 Low
EPSS
Percentile
91.4%
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Affected configurations
Node
zohocorpmanageengine_servicedesk_plusMatch8.1-
ORzohocorpmanageengine_servicedesk_plusMatch8.2-
ORzohocorpmanageengine_servicedesk_plusMatch8.28201
ORzohocorpmanageengine_servicedesk_plusMatch8.28202
ORzohocorpmanageengine_servicedesk_plusMatch8.28203
ORzohocorpmanageengine_servicedesk_plusMatch8.28204
ORzohocorpmanageengine_servicedesk_plusMatch8.28205
ORzohocorpmanageengine_servicedesk_plusMatch8.28206
ORzohocorpmanageengine_servicedesk_plusMatch8.28207
ORzohocorpmanageengine_servicedesk_plusMatch8.28208
ORzohocorpmanageengine_servicedesk_plusMatch8.28209
ORzohocorpmanageengine_servicedesk_plusMatch8.28210
ORzohocorpmanageengine_servicedesk_plusMatch8.28211
ORzohocorpmanageengine_servicedesk_plusMatch8.28212
ORzohocorpmanageengine_servicedesk_plusMatch8.28213
ORzohocorpmanageengine_servicedesk_plusMatch8.28214
ORzohocorpmanageengine_servicedesk_plusMatch8.28215
ORzohocorpmanageengine_servicedesk_plusMatch8.28216
ORzohocorpmanageengine_servicedesk_plusMatch8.28217
ORzohocorpmanageengine_servicedesk_plusMatch9.0-
ORzohocorpmanageengine_servicedesk_plusMatch9.09000
ORzohocorpmanageengine_servicedesk_plusMatch9.09001
ORzohocorpmanageengine_servicedesk_plusMatch9.09002
ORzohocorpmanageengine_servicedesk_plusMatch9.09003
ORzohocorpmanageengine_servicedesk_plusMatch9.09004
ORzohocorpmanageengine_servicedesk_plusMatch9.09005
ORzohocorpmanageengine_servicedesk_plusMatch9.09006
ORzohocorpmanageengine_servicedesk_plusMatch9.09007
ORzohocorpmanageengine_servicedesk_plusMatch9.09008
ORzohocorpmanageengine_servicedesk_plusMatch9.09009
ORzohocorpmanageengine_servicedesk_plusMatch9.09010
ORzohocorpmanageengine_servicedesk_plusMatch9.09011
ORzohocorpmanageengine_servicedesk_plusMatch9.09012
ORzohocorpmanageengine_servicedesk_plusMatch9.09013
ORzohocorpmanageengine_servicedesk_plusMatch9.09014
ORzohocorpmanageengine_servicedesk_plusMatch9.09016
ORzohocorpmanageengine_servicedesk_plusMatch9.09017
ORzohocorpmanageengine_servicedesk_plusMatch9.09018
ORzohocorpmanageengine_servicedesk_plusMatch9.09019
ORzohocorpmanageengine_servicedesk_plusMatch9.09020
ORzohocorpmanageengine_servicedesk_plusMatch9.09021
ORzohocorpmanageengine_servicedesk_plusMatch9.09022
ORzohocorpmanageengine_servicedesk_plusMatch9.09023
ORzohocorpmanageengine_servicedesk_plusMatch9.09024
ORzohocorpmanageengine_servicedesk_plusMatch9.09025
ORzohocorpmanageengine_servicedesk_plusMatch9.09026
ORzohocorpmanageengine_servicedesk_plusMatch9.09027
ORzohocorpmanageengine_servicedesk_plusMatch9.09028
ORzohocorpmanageengine_servicedesk_plusMatch9.09029
ORzohocorpmanageengine_servicedesk_plusMatch9.09030
ORzohocorpmanageengine_servicedesk_plusMatch9.09031
ORzohocorpmanageengine_servicedesk_plusMatch9.09032
ORzohocorpmanageengine_servicedesk_plusMatch9.09033
ORzohocorpmanageengine_servicedesk_plusMatch9.09034
ORzohocorpmanageengine_servicedesk_plusMatch9.09035
ORzohocorpmanageengine_servicedesk_plusMatch9.09036
ORzohocorpmanageengine_servicedesk_plusMatch9.09037
ORzohocorpmanageengine_servicedesk_plusMatch9.09038
ORzohocorpmanageengine_servicedesk_plusMatch9.09039
ORzohocorpmanageengine_servicedesk_plusMatch9.09040
ORzohocorpmanageengine_servicedesk_plusMatch9.09041
ORzohocorpmanageengine_servicedesk_plusMatch9.09042
ORzohocorpmanageengine_servicedesk_plusMatch9.09043
ORzohocorpmanageengine_servicedesk_plusMatch9.09044
ORzohocorpmanageengine_servicedesk_plusMatch9.09045
ORzohocorpmanageengine_servicedesk_plusMatch9.09046
ORzohocorpmanageengine_servicedesk_plusMatch9.09047
ORzohocorpmanageengine_servicedesk_plusMatch9.09048
ORzohocorpmanageengine_servicedesk_plusMatch9.09049
ORzohocorpmanageengine_servicedesk_plusMatch9.1-
ORzohocorpmanageengine_servicedesk_plusMatch9.19100
ORzohocorpmanageengine_servicedesk_plusMatch9.19101
ORzohocorpmanageengine_servicedesk_plusMatch9.19102
ORzohocorpmanageengine_servicedesk_plusMatch9.19103
ORzohocorpmanageengine_servicedesk_plusMatch9.19104
ORzohocorpmanageengine_servicedesk_plusMatch9.19105
ORzohocorpmanageengine_servicedesk_plusMatch9.19106
ORzohocorpmanageengine_servicedesk_plusMatch9.19107
ORzohocorpmanageengine_servicedesk_plusMatch9.19108
ORzohocorpmanageengine_servicedesk_plusMatch9.19109
ORzohocorpmanageengine_servicedesk_plusMatch9.19110
ORzohocorpmanageengine_servicedesk_plusMatch9.19111
ORzohocorpmanageengine_servicedesk_plusMatch9.19112
ORzohocorpmanageengine_servicedesk_plusMatch9.19113
ORzohocorpmanageengine_servicedesk_plusMatch9.19114
ORzohocorpmanageengine_servicedesk_plusMatch9.19115
ORzohocorpmanageengine_servicedesk_plusMatch9.19116
ORzohocorpmanageengine_servicedesk_plusMatch9.19117
ORzohocorpmanageengine_servicedesk_plusMatch9.19118
ORzohocorpmanageengine_servicedesk_plusMatch9.19119
ORzohocorpmanageengine_servicedesk_plusMatch9.19120
ORzohocorpmanageengine_servicedesk_plusMatch9.19121
ORzohocorpmanageengine_servicedesk_plusMatch9.2-
ORzohocorpmanageengine_servicedesk_plusMatch9.29200
ORzohocorpmanageengine_servicedesk_plusMatch9.29201
ORzohocorpmanageengine_servicedesk_plusMatch9.29202
ORzohocorpmanageengine_servicedesk_plusMatch9.29203
ORzohocorpmanageengine_servicedesk_plusMatch9.29204
ORzohocorpmanageengine_servicedesk_plusMatch9.29205
ORzohocorpmanageengine_servicedesk_plusMatch9.29206
ORzohocorpmanageengine_servicedesk_plusMatch9.29207
ORzohocorpmanageengine_servicedesk_plusMatch9.29208
ORzohocorpmanageengine_servicedesk_plusMatch9.29209
ORzohocorpmanageengine_servicedesk_plusMatch9.29210
ORzohocorpmanageengine_servicedesk_plusMatch9.29211
ORzohocorpmanageengine_servicedesk_plusMatch9.29212
ORzohocorpmanageengine_servicedesk_plusMatch9.29213
ORzohocorpmanageengine_servicedesk_plusMatch9.29214
ORzohocorpmanageengine_servicedesk_plusMatch9.29215
ORzohocorpmanageengine_servicedesk_plusMatch9.29216
ORzohocorpmanageengine_servicedesk_plusMatch9.29217
ORzohocorpmanageengine_servicedesk_plusMatch9.29218
ORzohocorpmanageengine_servicedesk_plusMatch9.29219
ORzohocorpmanageengine_servicedesk_plusMatch9.29220
ORzohocorpmanageengine_servicedesk_plusMatch9.29221
ORzohocorpmanageengine_servicedesk_plusMatch9.29222
ORzohocorpmanageengine_servicedesk_plusMatch9.29223
ORzohocorpmanageengine_servicedesk_plusMatch9.29224
ORzohocorpmanageengine_servicedesk_plusMatch9.29225
ORzohocorpmanageengine_servicedesk_plusMatch9.29226
ORzohocorpmanageengine_servicedesk_plusMatch9.29227
ORzohocorpmanageengine_servicedesk_plusMatch9.29228
ORzohocorpmanageengine_servicedesk_plusMatch9.29229
ORzohocorpmanageengine_servicedesk_plusMatch9.29230
ORzohocorpmanageengine_servicedesk_plusMatch9.29231
ORzohocorpmanageengine_servicedesk_plusMatch9.29232
ORzohocorpmanageengine_servicedesk_plusMatch9.29233
ORzohocorpmanageengine_servicedesk_plusMatch9.29234
ORzohocorpmanageengine_servicedesk_plusMatch9.29235
ORzohocorpmanageengine_servicedesk_plusMatch9.29236
ORzohocorpmanageengine_servicedesk_plusMatch9.29237
ORzohocorpmanageengine_servicedesk_plusMatch9.29238
ORzohocorpmanageengine_servicedesk_plusMatch9.29239
ORzohocorpmanageengine_servicedesk_plusMatch9.29240
ORzohocorpmanageengine_servicedesk_plusMatch9.29241
ORzohocorpmanageengine_servicedesk_plusMatch9.29242
ORzohocorpmanageengine_servicedesk_plusMatch9.3-
ORzohocorpmanageengine_servicedesk_plusMatch9.39300
ORzohocorpmanageengine_servicedesk_plusMatch9.39301
ORzohocorpmanageengine_servicedesk_plusMatch9.39302
ORzohocorpmanageengine_servicedesk_plusMatch9.39303
ORzohocorpmanageengine_servicedesk_plusMatch9.39304
ORzohocorpmanageengine_servicedesk_plusMatch9.39305
ORzohocorpmanageengine_servicedesk_plusMatch9.39306
ORzohocorpmanageengine_servicedesk_plusMatch9.39307
ORzohocorpmanageengine_servicedesk_plusMatch9.39308
ORzohocorpmanageengine_servicedesk_plusMatch9.39309
ORzohocorpmanageengine_servicedesk_plusMatch9.39310
ORzohocorpmanageengine_servicedesk_plusMatch9.39311
ORzohocorpmanageengine_servicedesk_plusMatch9.39312
ORzohocorpmanageengine_servicedesk_plusMatch9.39313
ORzohocorpmanageengine_servicedesk_plusMatch9.39314
ORzohocorpmanageengine_servicedesk_plusMatch9.39315
ORzohocorpmanageengine_servicedesk_plusMatch9.39316
ORzohocorpmanageengine_servicedesk_plusMatch9.39317
ORzohocorpmanageengine_servicedesk_plusMatch9.39318
ORzohocorpmanageengine_servicedesk_plusMatch9.39319
ORzohocorpmanageengine_servicedesk_plusMatch9.39320
ORzohocorpmanageengine_servicedesk_plusMatch9.39321
ORzohocorpmanageengine_servicedesk_plusMatch9.39322
ORzohocorpmanageengine_servicedesk_plusMatch9.39323
ORzohocorpmanageengine_servicedesk_plusMatch9.39324
ORzohocorpmanageengine_servicedesk_plusMatch9.39325
ORzohocorpmanageengine_servicedesk_plusMatch9.39326
ORzohocorpmanageengine_servicedesk_plusMatch9.39327
ORzohocorpmanageengine_servicedesk_plusMatch9.39328
ORzohocorpmanageengine_servicedesk_plusMatch9.39329
ORzohocorpmanageengine_servicedesk_plusMatch9.39330
ORzohocorpmanageengine_servicedesk_plusMatch9.39331
ORzohocorpmanageengine_servicedesk_plusMatch9.39332
ORzohocorpmanageengine_servicedesk_plusMatch9.39333
ORzohocorpmanageengine_servicedesk_plusMatch9.39334
ORzohocorpmanageengine_servicedesk_plusMatch9.39335
ORzohocorpmanageengine_servicedesk_plusMatch9.39336
ORzohocorpmanageengine_servicedesk_plusMatch9.4-
ORzohocorpmanageengine_servicedesk_plusMatch9.49400
ORzohocorpmanageengine_servicedesk_plusMatch9.49401
ORzohocorpmanageengine_servicedesk_plusMatch9.49402
ORzohocorpmanageengine_servicedesk_plusMatch9.49403
ORzohocorpmanageengine_servicedesk_plusMatch9.49404
ORzohocorpmanageengine_servicedesk_plusMatch9.49405
ORzohocorpmanageengine_servicedesk_plusMatch9.49406
ORzohocorpmanageengine_servicedesk_plusMatch9.49407
ORzohocorpmanageengine_servicedesk_plusMatch9.49408
ORzohocorpmanageengine_servicedesk_plusMatch9.49409
ORzohocorpmanageengine_servicedesk_plusMatch9.49410
ORzohocorpmanageengine_servicedesk_plusMatch9.49411
ORzohocorpmanageengine_servicedesk_plusMatch9.49412
ORzohocorpmanageengine_servicedesk_plusMatch9.49413
ORzohocorpmanageengine_servicedesk_plusMatch9.49414
ORzohocorpmanageengine_servicedesk_plusMatch9.49415
ORzohocorpmanageengine_servicedesk_plusMatch9.49416
ORzohocorpmanageengine_servicedesk_plusMatch9.49417
ORzohocorpmanageengine_servicedesk_plusMatch9.49418
ORzohocorpmanageengine_servicedesk_plusMatch9.49419
ORzohocorpmanageengine_servicedesk_plusMatch9.49420
ORzohocorpmanageengine_servicedesk_plusMatch9.49421
ORzohocorpmanageengine_servicedesk_plusMatch9.49422
ORzohocorpmanageengine_servicedesk_plusMatch9.49423
ORzohocorpmanageengine_servicedesk_plusMatch9.49424
ORzohocorpmanageengine_servicedesk_plusMatch9.49425
ORzohocorpmanageengine_servicedesk_plusMatch9.49426
ORzohocorpmanageengine_servicedesk_plusMatch9.49427
ORzohocorpmanageengine_servicedesk_plusMatch10.0
ORzohocorpmanageengine_servicedesk_plusMatch10.0.0-
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010000
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010001
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010002
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010003
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010004
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010005
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010006
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010007
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010008
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010009
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010010
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010011
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010012
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010013
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010014
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010015
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010016
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010017
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010018
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010019
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010020
ORzohocorpmanageengine_servicedesk_plusMatch10.0.010021
ORzohocorpmanageengine_servicedesk_plusMatch10.5-
ORzohocorpmanageengine_servicedesk_plusMatch10.510500
ORzohocorpmanageengine_servicedesk_plusMatch10.510501
ORzohocorpmanageengine_servicedesk_plusMatch10.510502
ORzohocorpmanageengine_servicedesk_plusMatch10.510503
ORzohocorpmanageengine_servicedesk_plusMatch10.510504
ORzohocorpmanageengine_servicedesk_plusMatch10.510505
ORzohocorpmanageengine_servicedesk_plusMatch10.510506
ORzohocorpmanageengine_servicedesk_plusMatch10.510507
ORzohocorpmanageengine_servicedesk_plusMatch10.510508
ORzohocorpmanageengine_servicedesk_plusMatch10.510509
ORzohocorpmanageengine_servicedesk_plusMatch10.510510
ORzohocorpmanageengine_servicedesk_plusMatch10.510511
ORzohocorpmanageengine_servicedesk_plusMatch10.510512
ORzohocorpmanageengine_servicedesk_plusMatch10.510513
ORzohocorpmanageengine_servicedesk_plusMatch10.510514
ORzohocorpmanageengine_servicedesk_plusMatch11.0-
ORzohocorpmanageengine_servicedesk_plusMatch11.011000
ORzohocorpmanageengine_servicedesk_plusMatch11.011001
ORzohocorpmanageengine_servicedesk_plusMatch11.011002
ORzohocorpmanageengine_servicedesk_plusMatch11.011003
ORzohocorpmanageengine_servicedesk_plusMatch11.011004
ORzohocorpmanageengine_servicedesk_plusMatch11.011005
ORzohocorpmanageengine_servicedesk_plusMatch11.011006
ORzohocorpmanageengine_servicedesk_plusMatch11.011007
ORzohocorpmanageengine_servicedesk_plusMatch11.011008
ORzohocorpmanageengine_servicedesk_plusMatch11.011009
ORzohocorpmanageengine_servicedesk_plusMatch11.011010
ORzohocorpmanageengine_servicedesk_plusMatch11.1-
ORzohocorpmanageengine_servicedesk_plusMatch11.111100
ORzohocorpmanageengine_servicedesk_plusMatch11.111101
ORzohocorpmanageengine_servicedesk_plusMatch11.111102
ORzohocorpmanageengine_servicedesk_plusMatch11.111103
ORzohocorpmanageengine_servicedesk_plusMatch11.111104
ORzohocorpmanageengine_servicedesk_plusMatch11.111105
ORzohocorpmanageengine_servicedesk_plusMatch11.111106
ORzohocorpmanageengine_servicedesk_plusMatch11.111107
ORzohocorpmanageengine_servicedesk_plusMatch11.111108
ORzohocorpmanageengine_servicedesk_plusMatch11.111109
ORzohocorpmanageengine_servicedesk_plusMatch11.111110
ORzohocorpmanageengine_servicedesk_plusMatch11.111111
ORzohocorpmanageengine_servicedesk_plusMatch11.111112
ORzohocorpmanageengine_servicedesk_plusMatch11.111113
ORzohocorpmanageengine_servicedesk_plusMatch11.111114
ORzohocorpmanageengine_servicedesk_plusMatch11.111115
ORzohocorpmanageengine_servicedesk_plusMatch11.111116
ORzohocorpmanageengine_servicedesk_plusMatch11.111117
ORzohocorpmanageengine_servicedesk_plusMatch11.1build11118
ORzohocorpmanageengine_servicedesk_plusMatch11.1build11119
Related
nessus
nessus
ManageEngine AssentExplorer < 6.8 Unauthenticated Stored XSS
2021-04-12 00:00:00
ManageEngine ServiceDesk Plus < 11.2 Build 11200 Unauthenticated Stored XSS
2021-04-12 00:00:00
cve
cve
CVE-2021-20080
2021-04-09 18:15:13
prion
prion
Cross site scripting
2021-04-09 18:15:00
cvelist
cvelist
CVE-2021-20080
2021-04-09 17:21:07
checkpoint_advisories
checkpoint_advisories
Zoho ManageEngine ServiceDesk Plus Cross-Site Scripting (CVE-2021-20080)
2022-11-20 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.033 Low
EPSS
Percentile
91.4%
Related for NVD:CVE-2021-20080