Kayako

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Kayako records in CISA KEV

No Kayako vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Esupport 12 records LOW Supportsuite 8 records LOW Liveresponse 4 records LOW Fusion 1 record LOW Kayako Fusion 1 record LOW Samourai 1 record LOW

Records

12 records in Esupport · all components

TI-2010-02785 CVE-2010-2912 · GHSA-hvw3-wqpj-8g42

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote…

LOW 35

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a parameter in a downloads action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00975 Published 2010-07-28 No fix listed CWE-89

TI-2010-02784 CVE-2010-2911 · GHSA-m2g8-857v-hv6m

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote…

LOW 35

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a viewnews action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01012 Published 2010-07-28 No fix listed CWE-89

TI-2005-00444 CVE-2005-0487 · GHSA-789f-wh34-526r

Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and…

LOW 33

Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01292 Published 2005-02-19 No fix listed

TI-2005-00785 CVE-2005-0842 · GHSA-r73v-h6f2-chp7

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows…

LOW 25

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) _i or (2) _c parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02632 Published 2005-03-24 No fix listed

TI-2004-01290 CVE-2004-1413 · GHSA-c6jg-q487-8h79

Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to…

LOW 25

Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.p…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01097 Published 2005-02-12 No fix listed

TI-2007-01112 CVE-2007-1145 · GHSA-vm66-xcq3-qvjh

Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a (1) lostpasswor…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01981 Published 2007-02-27 No fix listed CWE-79

TI-2004-01289 CVE-2004-1412 · GHSA-5fjm-hw2m-m7w7

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows…

LOW 24

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML via the searchm parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2005-02-12 No fix listed

TI-2008-04544 CVE-2008-4761 · GHSA-6m5w-rg9x-5hhm

Cross-site scripting (XSS) vulnerability in…

LOW 23

Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2008-10-28 No fix listed CWE-79

TI-2009-03404 CVE-2009-3567 · GHSA-478q-7xf2-cxcp

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in…

LOW 22

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-10-06 No fix listed CWE-79

TI-2007-02474 CVE-2007-2562 · GHSA-rr6h-6gx2-wjcq

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the _m parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01028 Published 2007-05-09 No fix listed

TI-2010-00438 CVE-2010-0460 · GHSA-6w8q-vjhq-6qf2

Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0103 Published 2010-01-28 No fix listed CWE-79

TI-2006-03887 CVE-2006-4011 · GHSA-vpfg-qfxf-xw42

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako…

LOW 18

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.0219 Published 2006-08-07 No fix listed

Open these records in search →

Critical	0
High	2
Medium	20
Low	3
No CVSS	0