6.1

CVE-2021-20080

Exploit

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Servicedesk Plus Version8.1 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8201
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8202
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8203
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8204
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8205
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8206
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8207
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8208
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8209
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8210
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8211
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8212
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8213
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8214
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8215
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8216
Zohocorp ≫ Manageengine Servicedesk Plus Version8.2 Update8217
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9000
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9001
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9002
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9003
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9004
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9005
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9006
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9007
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9008
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9009
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9010
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9011
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9012
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9013
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9014
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9016
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9017
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9018
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9019
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9020
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9021
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9022
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9023
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9024
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9025
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9026
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9027
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9028
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9029
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9030
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9031
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9032
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9033
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9034
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9035
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9036
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9037
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9038
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9039
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9040
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9041
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9042
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9043
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9044
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9045
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9046
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9047
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9048
Zohocorp ≫ Manageengine Servicedesk Plus Version9.0 Update9049
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9100
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9101
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9102
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9103
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9104
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9105
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9106
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9107
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9108
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9109
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9110
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9111
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9112
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9113
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9114
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9115
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9116
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9117
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9118
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9119
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9120
Zohocorp ≫ Manageengine Servicedesk Plus Version9.1 Update9121
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9200
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9201
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9202
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9203
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9204
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9205
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9206
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9207
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9208
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9209
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9210
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9211
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9212
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9213
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9214
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9215
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9216
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9217
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9218
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9219
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9220
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9221
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9222
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9223
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9224
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9225
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9226
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9227
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9228
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9229
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9230
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9231
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9232
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9233
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9234
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9235
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9236
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9237
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9238
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9239
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9240
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9241
Zohocorp ≫ Manageengine Servicedesk Plus Version9.2 Update9242
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9300
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9301
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9302
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9303
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9304
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9305
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9306
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9307
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9308
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9309
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9310
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9311
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9312
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9313
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9314
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9315
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9316
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9317
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9318
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9319
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9320
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9321
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9322
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9323
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9324
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9325
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9326
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9327
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9328
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9329
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9330
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9331
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9332
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9333
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9334
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9335
Zohocorp ≫ Manageengine Servicedesk Plus Version9.3 Update9336
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9400
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9401
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9402
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9403
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9404
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9405
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9406
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9407
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9408
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9409
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9410
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9411
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9412
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9413
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9414
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9415
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9416
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9417
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9418
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9419
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9420
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9421
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9422
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9423
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9424
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9425
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9426
Zohocorp ≫ Manageengine Servicedesk Plus Version9.4 Update9427
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10000
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10001
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10002
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10003
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10004
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10005
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10006
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10007
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10008
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10009
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10010
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10011
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10012
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10013
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10014
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10015
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10016
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10017
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10018
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10019
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10020
Zohocorp ≫ Manageengine Servicedesk Plus Version10.0.0 Update10021
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10500
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10501
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10502
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10503
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10504
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10505
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10506
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10507
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10508
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10509
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10510
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10511
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10512
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10513
Zohocorp ≫ Manageengine Servicedesk Plus Version10.5 Update10514
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11000
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11001
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11002
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11003
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11004
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11005
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11006
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11007
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11008
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11009
Zohocorp ≫ Manageengine Servicedesk Plus Version11.0 Update11010
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11100
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11101
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11102
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11103
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11104
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11105
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11106
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11107
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11108
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11109
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11110
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11111
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11112
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11113
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11114
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11115
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11116
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Update11117
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Updatebuild11118
Zohocorp ≫ Manageengine Servicedesk Plus Version11.1 Updatebuild11119
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 35.34% 0.967
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.