CVE-2020-6843: Zohocorp ManageEngine ServiceDesk Plus

Medium severity, CVSS 4.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: up to and including 11.0

Published 2020-01-23. Last modified 2026-06-17.