← CVE Intelligence

CVE-2021-20080

n/a / ManageEngine ServiceDesk Plus PUBLISHED

Description (CNA)

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.

Affected (CNA)

Vendor / productVersions
n/a / ManageEngine ServiceDesk Plusaffected Before 11200
n/a / ManageEngine AssetExploreraffected Before 6800

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.