CVE-2021-20080

Published: Apr 9, 2021Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.

Affected (276)

Products: Zohocorp: Manageengine Servicedesk Plus

Zohocorp

1 product

Manageengine Servicedesk Plus

Configuration A

276 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10000
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10001
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10002
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10003
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10004
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10005
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10006
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10007
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10008
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10009
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10010
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10011
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10012
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10013
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10014
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10015
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10016
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10017
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10018
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10019
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10020
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10021
Zohocorp Manageengine Servicedesk Plus	Version 10.0
Zohocorp Manageengine Servicedesk Plus	Version 10.5
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10500
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10501
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10502
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10503
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10504
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10505
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10506
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10507
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10508
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10509
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10510
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10511
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10512
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10513
Zohocorp Manageengine Servicedesk Plus	Version 10.5 10514
Zohocorp Manageengine Servicedesk Plus	Version 11.0
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11000
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11001
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11002
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11003
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11004
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11005
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11006
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11007
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11008
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11009
Zohocorp Manageengine Servicedesk Plus	Version 11.0 11010
Zohocorp Manageengine Servicedesk Plus	Version 11.1
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11100
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11101
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11102
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11103
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11104
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11105
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11106
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11107
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11108
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11109
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11110
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11111
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11112
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11113
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11114
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11115
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11116
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11117
Zohocorp Manageengine Servicedesk Plus	Version 11.1 build11118
Zohocorp Manageengine Servicedesk Plus	Version 11.1 build11119
Zohocorp Manageengine Servicedesk Plus	Version 8.1
Zohocorp Manageengine Servicedesk Plus	Version 8.2
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8201
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8202
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8203
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8204
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8205
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8206
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8207
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8208
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8209
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8210
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8211
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8212
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8213
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8214
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8215
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8216
Zohocorp Manageengine Servicedesk Plus	Version 8.2 8217
Zohocorp Manageengine Servicedesk Plus	Version 9.0
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9000
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9001
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9002
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9003
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9004
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9005
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9006
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9007
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9008
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9009
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9010
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9011
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9012
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9013
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9014
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9016
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9017
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9018
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9019
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9020
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9021
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9022
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9023
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9024
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9025
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9026
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9027
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9028
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9029
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9030
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9031
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9032
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9033
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9034
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9035
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9036
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9037
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9038
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9039
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9040
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9041
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9042
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9043
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9044
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9045
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9046
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9047
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9048
Zohocorp Manageengine Servicedesk Plus	Version 9.0 9049
Zohocorp Manageengine Servicedesk Plus	Version 9.1
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9100
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9101
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9102
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9103
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9104
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9105
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9106
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9107
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9108
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9109
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9110
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9111
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9112
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9113
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9114
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9115
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9116
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9117
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9118
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9119
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9120
Zohocorp Manageengine Servicedesk Plus	Version 9.1 9121
Zohocorp Manageengine Servicedesk Plus	Version 9.2
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9200
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9201
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9202
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9203
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9204
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9205
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9206
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9207
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9208
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9209
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9210
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9211
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9212
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9213
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9214
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9215
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9216
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9217
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9218
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9219
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9220
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9221
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9222
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9223
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9224
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9225
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9226
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9227
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9228
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9229
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9230
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9231
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9232
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9233
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9234
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9235
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9236
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9237
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9238
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9239
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9240
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9241
Zohocorp Manageengine Servicedesk Plus	Version 9.2 9242
Zohocorp Manageengine Servicedesk Plus	Version 9.3
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9300
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9301
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9302
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9303
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9304
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9305
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9306
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9307
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9308
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9309
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9310
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9311
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9312
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9313
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9314
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9315
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9316
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9317
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9318
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9319
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9320
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9321
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9322
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9323
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9324
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9325
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9326
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9327
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9328
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9329
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9330
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9331
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9332
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9333
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9334
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9335
Zohocorp Manageengine Servicedesk Plus	Version 9.3 9336
Zohocorp Manageengine Servicedesk Plus	Version 9.4
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9400
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9401
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9402
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9403
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9404
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9405
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9406
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9407
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9408
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9409
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9410
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9411
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9412
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9413
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9414
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9415
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9416
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9417
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9418
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9419
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9420
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9421
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9422
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9423
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9424
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9425
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9426
Zohocorp Manageengine Servicedesk Plus	Version 9.4 9427

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://www.tenable.com/security/research/tra-2021-11

Source: vulnreport@tenable.com

ExploitThird Party Advisory

https://www.tenable.com/security/research/tra-2021-11

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.