Solarwinds Webhelpdesk
6 CVEs affecting Solarwinds Webhelpdesk. Latest disclosed: 2022-03-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35254 | High | 8.2 | 2022-03-25 | SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent t… |
CVE-2019-20002 | High | 7.8 | 2020-04-27 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help r… |
CVE-2021-35232 | Medium | 6.8 | 2021-12-27 | Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host mach… |
CVE-2019-16959 | Medium | 6.5 | 2020-12-21 | SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. |
CVE-2019-16957 | Medium | 5.4 | 2020-12-18 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. |
CVE-2019-16955 | Medium | 5.4 | 2020-12-18 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. |