CVE-2020-19554 – Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager

Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.   Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19554 Reference (s):

• https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125177