CVE-2020-15521 – Zoho ManageEngine Applications Manager before 14 build 14730 has no prote

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15521

Reference (s):

• https://www.manageengine.com/products/applications_manager/issues.html#v14730
• https://www.manageengine.com