CVE-2021-20080

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote…

published April 9, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.8th percentile for exploit probability.

CVSS
—
EPSS
93%
Percentile
99.8
In the wild
Unconfirmed
What it is

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.93108 · 99.8th percentile
Published
2021-04-09T17:21Z
EPSS history
Timeline
  • 09 APR 17:21Z
    Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote…
    cvelistv5