Vendors / Freshworks Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Freshworks records in CISA KEV No Freshworks vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00965 · Published 2022-09-12 · No fix listed CWE-295
Priority LOW 36
FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00528 · Published 2022-09-12 · No fix listed CWE-354
Priority LOW 28
A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress.
CVSS 3.1 MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00453 · Published 2023-04-17 · No fix listed CWE-601
Priority LOW 22
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Freshworks Freshdesk (official).This issue affects Freshdesk (official): from n/a through 2.3.6.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00381 · Published 2024-04-15 · No fix listed CWE-601
Open these records in search → All records by CVSS severity
Critical0 High2 Medium2 Low0 No CVSS0