medium6.1
CVE-2019-12540
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5.
Impact
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the WorkOrder.do search field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | Version 10.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine
- https://www.manageengine.com/products/service-desk/readme.html
- https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine
- https://www.manageengine.com/products/service-desk/readme.html