CVE-2021-46065 | BDVDB-2026-168686 Detail

Description#

A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.manageengine.com/products/service-desk/on-premises/readme.html
https://github.com/corrupted-brain/Findings/blob/main/ManageEngine%20XSS.md

Exploit#

No public exploit known

History#

Version 12022-01-27Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.