9 results (0.005 seconds)

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-40325

https://notcve.org/view.php?id=CVE-2022-40325

11 Sep 2022 — SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262. SysAid Help Desk versiones anteriores a 22.1.65, permite un ataque de tipo XSS por medio del Asset Dashboard, también se conoce como FR# 67262 • https://documentation.sysaid.com/docs/22165-release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-40324

https://notcve.org/view.php?id=CVE-2022-40324

11 Sep 2022 — SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258. SysAid Help Desk versiones anteriores a 22.1.65, permite un ataque de tipo XSS por medio del campo Linked SRs, también se conoce como FR# 67258 • https://documentation.sysaid.com/docs/22165-release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-40323

https://notcve.org/view.php?id=CVE-2022-40323

11 Sep 2022 — SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241. SysAid Help Desk versiones anteriores a 22.1.65, permite un ataque de tipo XSS en el módulo Password Services, también se conoce como FR# 67241 • https://documentation.sysaid.com/docs/22165-release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-40322

https://notcve.org/view.php?id=CVE-2022-40322

11 Sep 2022 — SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579. SysAid Help Desk versiones anteriores a 22.1.65, permite un ataque de tipo XSS, también se conoce como FR# 66542 y 65579 • https://documentation.sysaid.com/docs/22165-release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 2%CPEs: 1EXPL: 1

CVE-2019-16961

https://notcve.org/view.php?id=CVE-2019-16961

15 Jan 2021 — SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name. SolarWinds Web Help Desk versión 12.7.0, permite un ataque de tipo XSS por medio de un Schedule Name • https://support.solarwinds.com/SuccessCenter/s • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 1%CPEs: 1EXPL: 1

CVE-2019-16954

https://notcve.org/view.php?id=CVE-2019-16954

06 Jan 2021 — SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. SolarWinds Web Help Desk versión 12.7.0, permite una inyección de HTML por medio de un Comentario en un ticket de Petición de Ayuda • https://support.solarwinds.com/SuccessCenter/s • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 1%CPEs: 1EXPL: 1

CVE-2019-16960

https://notcve.org/view.php?id=CVE-2019-16960

04 Jan 2021 — SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. SolarWinds Web Help Desk versión 12.7.0, permite un ataque de tipo XSS por medio de un archivo de plantilla CSV con un campo Location Name diseñado. • https://support.solarwinds.com/SuccessCenter/s • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 1%CPEs: 1EXPL: 1

CVE-2019-16956

https://notcve.org/view.php?id=CVE-2019-16956

04 Jan 2021 — SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. SolarWinds Web Help Desk versión 12.7.0, permite un ataque de tipo XSS por medio del parámetro Request Type de un ticket. • https://support.solarwinds.com/SuccessCenter/s • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 1%CPEs: 1EXPL: 1

CVE-2019-16958

https://notcve.org/view.php?id=CVE-2019-16958

01 Dec 2020 — Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name. Un vulnerabilidad de tipo Cross-site Scripting (XSS) en SolarWinds Web Help Desk versión 12.7.0, permite al atacante inyectar script web o HTML arbitrario por medio del Location Name • https://www.esecforte.com/cross-site-scripting-vulnerability-with-solarwinds-web-help-desk • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •