Zendesk
3 CVEs across 6 Zendesk products. Browse Zendesk vulnerabilities, severities, and proof-of-concept exploits.
Zendesk products with known CVEs
Zendesk CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-23716 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-42363 | High | 8.8 | 2024-08-20 | Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the Role… |
CVE-2021-36750 | High | 8.1 | 2021-12-22 | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across US… |
CVE-2018-20857 | High | 7.5 | 2019-07-26 | Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain… |
CVE-2015-6921 | | | 2015-09-11 | Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure… |