Read the docs

Hesk

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Hesk records in CISA KEV

No Hesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hesk 3 records LOW

Records

3 records in Hesk · all components

TI-2020-10878 CVE-2020-13897 · GHSA-q24j-hrpr-2rwg

HESK before 3.1.10 allows reflected XSS.

Priority LOW 28

HESK before 3.1.10 allows reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2020-06-07 No fix listed CWE-79
TI-2011-03300 CVE-2011-3743 · GHSA-82qp-gqq6-9qgr

Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to…

Priority LOW 26

Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/footer.inc.php and certain other files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200
Open these records in search →