CVE-2021-20080

Published Apr 9, 2021 CVSS 3.1 · 6.1 Medium EPSS 93.1% KEV · Not listed
Description
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
tenable
Published
Updated
Aug 3, 2024, 5:30 PM
Reserved
Dec 17, 2020, 12:00 AM
Status
Modified
Published
Apr 9, 2021, 6:15 PM
Modified
Jun 17, 2026, 3:33 AM