2526 matches found
Atlassian Jira Service Desk 4.7.1 < 4.10.0 Cross-Site Scripting In API and Integrations
According to its self-reported version number, the Atlassian Jira Service Desk application running on the remote host is version 4.7.x prior to 4.10.0. It is, therefore, affected by a flaw which may permit a remote attacker to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS...
Atlassian Jira Service Desk < 4.13.20 Internal Network Leakage Service-Side Request Forgery
According to its self-reported version number, the Atlassian Jira Service Desk application running on the remote host is prior to version 4.13.20. It is, therefore, affected by a flaw which may allow authenticated remote attackers to access the content of internal network resources via a...
Atlassian Jira Service Desk 4.8.1 < 4.12.0 Information Disclosure In API and Integrations
According to its self-reported version number, the Atlassian Jira Service Desk application running on the remote host is version 4.8.x prior to 4.12.0. It is, therefore, affected by a flaw which may permit a remote attacker authenticated as a non-administrator user to view Project Request-Types a...
SUSE CVE-2012-2582
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...
SUSE CVE-2012-4751
Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC...
SUSE CVE-2013-2625
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified...
SUSE CVE-2013-4717
Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...
SUSE CVE-2013-5464
IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated wit...
SUSE CVE-2014-9324
The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors...
CVE-2023-21778
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability...
CVE-2023-21778
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability...
Remote code execution
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability...
CVE-2023-21778
CVE-2023-21778 corresponds to a Microsoft Dynamics Unified Service Desk remote code execution vulnerability. The connected PT-2023-1796 describes the issue as related to incorrect code generation management in Microsoft Dynamics 365 Unified Service Desk, enabling a remote attacker to execute arbi...
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability
...
KLA20227 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploite...
PT-2023-1796 · Microsoft · Dynamics 365 Unified Service Desk
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Unified Service Desk affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics 365 Unified Service Desk, which can be exploited by a remote attacker to...
Atlassian JIRA Service Desk 5.3.x < 5.3.3 / 5.4.x < 5.4.2 / 5.5.x < 5.5.1 Impersonation (JSDSERVER-12312)
The instance of Atlassian Service Desk hosted on the remote web server is 5.3 prior to 5.3.3, 5.4 prior to 5.4.2 or 5.5 prior to 5.5.1. Is is, therefore, affected by an authentication vulnerability. A remote attacker included on Jira issues or requests with other users can impersonate those users...
CVE-2022-46842
Cross-Site Request Forgery CSRF vulnerability in JS Help Desk plugin = 2.7.1 versions...