Read the docs

Lansweeper

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Lansweeper records in CISA KEV

No Lansweeper vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lansweeper 18 records HIGH

Records

18 records in Lansweeper · all components

TI-2022-06484 CVE-2022-22149 · GHSA-mc88-h9v4-24mj

SQL injection in lansweeper

Priority HIGH 78

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.72601 Published 2022-04-14 No fix listed CWE-89
TI-2022-05625 CVE-2022-21234 · GHSA-6f4m-7xvc-gvwr

SQL injection in lansweeper

Priority HIGH 78

An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.72601 Published 2022-04-14 No fix listed CWE-89
TI-2022-14201 CVE-2022-32573 · GHSA-7xx5-33hr-pq7g

Path traversal in lansweeper

Priority HIGH 76

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.03831 Published 2022-12-19 No fix listed CWE-22
TI-2022-11977 CVE-2022-29517 · GHSA-66w9-v6pc-5w4r

Path traversal in lansweeper

Priority HIGH 76

A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.57637 Published 2022-12-19 No fix listed CWE-22
TI-2022-05603 CVE-2022-21210 · GHSA-qxw4-5w76-j3pr

SQL injection in lansweeper

Priority HIGH 76

An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.71227 Published 2022-04-14 No fix listed CWE-89
TI-2022-11971 CVE-2022-29511 · GHSA-9mf2-xcfj-hr6v

Path traversal in lansweeper

Priority MEDIUM 64

A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02579 Published 2022-12-19 No fix listed CWE-22
TI-2022-05548 CVE-2022-21145 · GHSA-c8r6-vf82-fj44

Cross-site scripting in lansweeper

Priority MEDIUM 64

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.77778 Published 2022-04-14 No fix listed CWE-80
TI-2022-14307 CVE-2022-32763 · GHSA-g5rj-w594-3r28

Cross-site scripting in lansweeper

Priority MEDIUM 62

A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01194 Published 2022-12-19 No fix listed CWE-184
TI-2022-11345 CVE-2022-28703 · GHSA-r8hg-9x2x-9w8f

Cross-site scripting in lansweeper

Priority MEDIUM 60

A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01164 Published 2022-12-19 No fix listed CWE-80
TI-2022-10513 CVE-2022-27498 · GHSA-qrp4-fhcg-859g

Path traversal in lansweeper

Priority MEDIUM 58

A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.38338 Published 2022-12-19 No fix listed CWE-22
TI-2017-09982 CVE-2017-13706 · GHSA-pj2p-4hq9-w6vq

XML external entity (XXE) vulnerability in the import package functionality of the…

Priority MEDIUM 46

XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of se…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01987 Published 2017-10-10 No fix listed CWE-611
Open these records in search →