| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine servicedesk plus | = 10.0= 10.0.0= 10.5= 11.0= 11.1= 8.1= 8.2= 9.0= 9.1= 9.2= 9.3= 9.4 |
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free