Landesk

9 CVEs across 5 Landesk products. Browse Landesk vulnerabilities, severities, and proof-of-concept exploits.

Landesk products with known CVEs

ProductCVEs
Landesk Management Suite6
Lenovo Thinkmanagement Console2
Landesk Security Suite1
Landesk Server Manager1
Management Gateway1
Landesk CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2014-5362High7.22017-09-19The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from thir…
CVE-2014-53612015-04-21Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of a…
CVE-2014-53602015-02-03Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web scri…
CVE-2012-11962012-02-18Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers…
CVE-2012-11952012-02-18Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement…
CVE-2010-28922010-11-15gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to execute arbitrary comm…
CVE-2008-61952009-02-20Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to rea…
CVE-2008-24682008-09-18Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow rem…
CVE-2007-16742007-04-18Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted…