← voltar
CVE-2021-20080

CVE-2021-20080

EPSS 93.1%
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Produtos afetados
n/a · ManageEngine AssetExplorern/a · ManageEngine ServiceDesk Plus

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.tenable.com/security/research/tra-2021-11