Help desk

This hub aggregates every CVE we track for Help desk, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Help desk.

• CVE-2021-33351Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket messag...9.0Mar 8, 2023
• CVE-2021-33353Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.9.8Mar 8, 2023
• CVE-2021-33352An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.9.8Mar 8, 2023
• CVE-2022-40325SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.6.1Sep 11, 2022
• CVE-2022-40324SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.6.1Sep 11, 2022
• CVE-2022-40323SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.6.1Sep 11, 2022
• CVE-2022-40322SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.6.1Sep 11, 2022
• CVE-2019-16958Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name.5.4Dec 1, 2020
• CVE-2007-4716Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.7.5Sep 5, 2007
• CVE-2006-6158Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbit...6.8Nov 28, 2006