Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Vision Helpdesk records in CISA KEVNo Vision Helpdesk vulnerabilities are listed in CISA KEV.
Priority MEDIUM 62
Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password (aka index.php?/home/forgot-password) vis_username parameter.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00279 · Published 2025-04-15 · No fix listed CWE-89
Open these records in search →