Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15521
Reference (s):
- https://www.manageengine.com/products/applications_manager/issues.html#v14730
- https://www.manageengine.com