EIP-2026-102501

The advisory describes a user enumeration vulnerability in ManageEngine ServiceDesk Plus, where authenticated and unauthenticated users can enumerate users and domains via specific AJAX servlet endpoints. The PoC demonstrates the vulnerability by showing different responses for valid and invalid users.