Cisco IP Phone 跨站请求伪造漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. A cross-site request forgery vulnerability exists in Cisco IP Phone versions 6800, 7800, and 8800, which stems from a vulnerability in the web-based management interface. A remo...

CVE-2021-20080

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks by uploading a crafted XML asset file...