{"id":"CVE-2021-46065","aliases":[],"url":"https://o3.security/vulnerability/CVE-2021-46065","summary":"A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.","details":"A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.","published":"2022-01-27T15:29:46.000Z","modified":"2024-08-04T05:02:10.180Z","cvss":null,"epss":{"score":0.91737,"percentile":0.99807,"asOf":"2026-08-25"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.manageengine.com/products/service-desk/on-premises/readme.html"},{"type":"WEB","url":"https://github.com/corrupted-brain/Findings/blob/main/ManageEngine%20XSS.md"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-04T05:02:10.180Z"}}