Topdesk

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Topdesk records in CISA KEV

No Topdesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Topdesk 4 records HIGH

Records

4 records in Topdesk · all components

TI-2023-17432 CVE-2023-34923 · GHSA-5c5q-j6rj-g663

XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12…

HIGH 70

XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00741 Published 2023-06-22 No fix listed CWE-863

TI-2018-07256 CVE-2018-10232 · GHSA-j2pm-9g69-p32r

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018…

LOW 30

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain s…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0058 Published 2018-07-11 No fix listed CWE-352

TI-2018-07255 CVE-2018-10231 · GHSA-fgg8-8p9x-h882

Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version)…

LOW 29

Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00772 Published 2018-07-11 No fix listed CWE-79

TI-2017-04953 CVE-2017-7276 · GHSA-25mr-v3vc-44xm

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

LOW 28

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00635 Published 2017-07-04 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0