Browse CVEs

HIGH 7.2 CVE-2021-35391 Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL. Deskpro No fix yet Fix from $1,9502023-07-21 MEDIUM 5.4 CVE-2021-36695 Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the download file … Deskpro No fix yet Fix from $1,6002021-09-08 MEDIUM 5.4 CVE-2021-36696 Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in social media links… Deskpro No fix yet Fix from $1,6002021-09-07 MEDIUM 5.4 CVE-2020-28722 Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an account … Deskpro after 2020.2.3.48207 Fix from $1,6002021-05-12 HIGH 8.8 CVE-2020-11465 An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privilege, allowing an attacker to… Deskpro 2019.8.0+ Fix from $1,9502020-04-01 HIGH 7.5 CVE-2020-11463 An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an atta… Deskpro 2019.8.0+ Fix from $1,9502020-04-01 HIGH 7.2 CVE-2020-11467 An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/api/style… Deskpro 2019.8.0+ Fix from $1,9502020-04-01 MEDIUM 6.8 CVE-2006-6159 Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script… Deskpro Mitigation only Fix from $1,6002006-11-28 MEDIUM 5.0 CVE-2003-0874 Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activitie… Deskpro Patch available Fix from $1,6002003-11-17