Vendors / Ladybirdweb Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Ladybirdweb records in CISA KEV No Ladybirdweb vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00481 · Published 2024-11-01 · No fix listed CWE-79
Priority MEDIUM 42
Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00805 · Published 2023-03-24 · No fix listed CWE-89
Priority LOW 39
public/rolechangeadmin in Faveo 1.9.3 allows CSRF.
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.02248 · Published 2017-04-06 · No fix listed CWE-352
Priority LOW 34
Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application.
CVSS 3.1 HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00467 · Published 2023-06-24 · No fix listed CWE-79
Priority LOW 31
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01084 · Published 2023-03-24 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
0 4 1 0 0
