TI-2024-28349 CVE-2024-42363
GHSL-2023-136_Samson
Priority HIGH 73
Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController.
Zendesk
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Zendesk records in CISA KEVNo Zendesk vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2021-14875 CVE-2021-36750 · GHSA-pj9c-cg8c-hvp4
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for…
Priority MEDIUM 50
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).
TI-2018-14819 CVE-2018-20857 · GHSA-qpxp-5j56-gg3x
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with…
Priority LOW 35
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with [email protected] followed by <!---->.
TI-2023-09530 CVE-2023-23716 · GHSA-58v3-m92j-9vc2
WordPress Zendesk Support for WordPress plugin <= 1.8.4 - Broken Access Control vulnerability
Priority LOW 21
Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zendesk Support for WordPress: from n/a through 1.8.…
TI-2015-05773 CVE-2015-6921 · GHSA-hqcv-x8w5-9578
Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x…
Priority LOW 15
Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web scri…