CVEDB API

Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.019

EPSS Ranking 82.2%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 3.5

References

Products affected by CVE-2020-6843

Zohocorp » Manageengine Servicedesk Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:-
Zohocorp » Manageengine Servicedesk Plus » Version: 10.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0
Zohocorp » Manageengine Servicedesk Plus » Version: 10.0.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0
Zohocorp » Manageengine Servicedesk Plus » Version: 10.5

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5
Zohocorp » Manageengine Servicedesk Plus » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0
Zohocorp » Manageengine Servicedesk Plus » Version: 8.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.1
Zohocorp » Manageengine Servicedesk Plus » Version: 8.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2
Zohocorp » Manageengine Servicedesk Plus » Version: 9.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0
Zohocorp » Manageengine Servicedesk Plus » Version: 9.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1
Zohocorp » Manageengine Servicedesk Plus » Version: 9.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2
Zohocorp » Manageengine Servicedesk Plus » Version: 9.3

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3
Zohocorp » Manageengine Servicedesk Plus » Version: 9.4

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4