CVE-2021-46065

MEDIUM 4.8CVE-2021-46065 · Published 27/01/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
manageengine servicedesk plus zohocorp	`= 11.3`	No fix yet

Description

A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.

References

corrupted-brain/Findings · Exploit
manageengine.com/products/service-desk/on-premises/readme.html · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free