Zendesk

3 CVEs across 6 Zendesk products. Browse Zendesk vulnerabilities, severities, and proof-of-concept exploits.

Zendesk products with known CVEs

ProductCVEs
Enc Datavault1
Enc Vaultapi1
Samlr1
Samson1
Zendesk Feedback Tab1
Zendesk Support For Wordpress1
Zendesk CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-23716Medium4.32024-12-09Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2024-42363High8.82024-08-20Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the Role…
CVE-2021-36750High8.12021-12-22ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across US…
CVE-2018-20857High7.52019-07-26Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain…
CVE-2015-69212015-09-11Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure…