CVE-2018-19634

CVE-2018-19634 affects CA Service Desk Manager versions 14.1 and 17. A vulnerability could allow a malicious actor to access survey information. Public sources list impact and attribution, with NVD noting network access and no authentication required (CVSSv3.1: 7.5, HIGH; Confidentiality impact H...

CVE-2013-2630

CVE-2013-2630 affects CA Service Desk Manager 12.5–12.7. The root cause is insufficient verification of URL query string parameters, enabling cross-site scripting via unspecified inputs in the web interface. Impact is cross-site scripting (remotely inject arbitrary scripts/HTML) as described in m...

CVE-2018-19635

CA Service Desk Manager versions 14.1 and 17 contain a privilege-escalation vulnerability in the user interface (CVE-2018-19635). The connected sources confirm the affected product and impact but do not provide exploit vectors, affected components beyond the UI, root cause specifics, or a publish...