197 matches found
CVE-2025-52204
CVE-2025-52204 – Reflected XSS / HTML Injection in Znuny customer.pl endpoint Summary A Reflected Cross-Site Scripting XSS and HTML Injection vulnerability exists in Znuny, allowing attackers to inject arbitrary JavaScript or HTML via the parameter defined by the system configuration...
Linux Distros Unpatched Vulnerability : CVE-2026-77506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. CVE-2026-77506 Note that Nessus relies on the presence of the package as reported by the...
CVE-2026-77506
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
DEBIAN-CVE-2026-77506
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
CVE-2026-77506
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
EUVD-2026-63586
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
CVE-2026-77506
Znuny before LTS 6.5.22 is affected by a template XSS vulnerability in the AgentTicketEmailResend component. An attacker with high privileges and requiring user interaction can inject malicious content through the template, leading to low-impact cross-origin confidentiality and integrity compromi...
CVE-2026-77506
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
CVE-2026-77506
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
PT-2026-79119
Name of the Vulnerable Software and Affected Versions Znuny versions prior to LTS 6.5.22 Description Cross-site Scripting XSS is possible via the AgentTicketEmailResend template. XSS is a security flaw where malicious scripts are injected into trusted websites. Recommendations Update to version L...
CVE-2026-77506: Improper Neutralization of Input During Web Page Generation
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...
The vulnerability of the Generic Interface component in the software for rapid display and access to information about clients in Znuny allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...
The vulnerability of the S/MIME protocol implementation in software for rapid display and access to information about clients of Znuny allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the S/MIME protocol implementation in software for quick display and access to information about clients in Znuny is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acce...
CVE-2026-50591
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences...
CVE-2026-50592
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...
DEBIAN-CVE-2026-50592
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...
DEBIAN-CVE-2026-50591
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences...
CVE-2026-50592
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...