DISPUTED AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration. NOTE: the vendor’s position is that this is intended functionality.
CPE | Name | Operator | Version |
---|---|---|---|
manageengine_servicedesk_plus | ge | 10 | |
manageengine_servicedesk_plus | lt | 10509 |