ZE
Vendor
Zendesk
7
CVEs
0
On KEV
0
New 30D
Products
ED8.1
Enc Datavault
Zendesk
1 CVEs0 on KEV0 new
EV8.1
Enc Vaultapi
Zendesk
1 CVEs0 on KEV0 new
SA7.5
Samlr
Zendesk
1 CVEs0 on KEV0 new
SA8.8
Samson
Zendesk
1 CVEs0 on KEV0 new
ZE7.5
Zendesk
Zendesk
1 CVEs0 on KEV0 new
ZF–
Zendesk Feedback Tab
Zendesk
1 CVEs0 on KEV0 new
ZS4.3
Zendesk Support for WordPress
Zendesk
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-23716 | ZS Zendesk Support for WordPress Zendesk | 4.3 | Dec 9 | WordPress Zendesk Support for WordPress plugin <= 1.8.4 - Broken Access Control vulnerability |
| CVE-2024-49193 | ZE Zendesk Zendesk | 7.5 | Oct 12 | Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant… |
| CVE-2024-42363 | SA Samson Zendesk | 8.8 | Aug 20 | GHSL-2023-136_Samson |
| CVE-2021-36750 | ED Enc Datavault Zendesk | 8.1 | Dec 22 | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under… |
| CVE-2018-20857 | SA Samlr Zendesk | 7.5 | Jul 26 | Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!----> |
| CVE-2015-6921 | ZF Zendesk Feedback Tab Zendesk | – | Sep 11 | Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback… |