← back
CVE-2021-20080

CVE-2021-20080

EPSS 93.1%
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Affected products
n/a · ManageEngine AssetExplorern/a · ManageEngine ServiceDesk Plus

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.tenable.com/security/research/tra-2021-11