ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.

Published Mar 25, 2019 · Updated Aug 5, 2024 · Assigned by mitre