Read the docs

Vision Helpdesk

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Vision Helpdesk records in CISA KEV

No Vision Helpdesk vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-24003 CVE-2025-32993 · GHSA-pcwj-m6p3-w8x3

SQL injection in Vision Helpdesk

Priority MEDIUM 62

Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password (aka index.php?/home/forgot-password) vis_username parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00279 Published 2025-04-15 No fix listed CWE-89
Open these records in search →