WE
Product
Webhelpdesk
On CISA KEVExploited in the wild
8
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 4Low 0
Watch
Add Webhelpdesk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16959 | 6.5 | Dec 21 | SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket Affected: 12.7.0 |
| CVE-2021-35232 | 6.1 | Dec 27 | Hard coded credentials discovered in SolarWinds Web Help Desk product Affected: through 12.7.6 |
| CVE-2019-16957 | 5.4 | Dec 18 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account Affected: 12.7.0 |
| CVE-2019-16955 | 5.4 | Dec 18 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request Affected: 12.7.0 |
Showing 4
