CVE-2017-9362: Improper Restriction of XML External Entity Reference

ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API...

PT-2019-8648

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus versions prior to 9312 Description The issue concerns an XML injection at the add Configuration items CMDB API. Recommendations For versions prior to 9312, update to version 9312 or later to resolve the issue...