Zucchetti

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Zucchetti records in CISA KEV

No Zucchetti vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Helpdeskadvanced 10 records MEDIUM Ad Hoc Infinity 5 records HIGH Infobusiness 4 records MEDIUM Hr Portal 1 record LOW Imagicle Uc Suite 1 record MEDIUM Infinity Zmaintenance 1 record LOW Infinity Zucchetti 1 record LOW

Records

22 records

TI-2024-34324 CVE-2024-51321 · GHSA-r63r-pwwp-jvj8

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an…

HIGH 68

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00342 Published 2025-03-11 No fix listed CWE-601

TI-2024-34322 CVE-2024-51319 · GHSA-g57w-j5gj-29qx

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity…

HIGH 67

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimg_upload.j…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00455 Published 2025-03-11 No fix listed CWE-98

TI-2024-34325 CVE-2024-51322 · GHSA-ch57-3pgj-79wf

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an…

MEDIUM 58

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmd_con…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00377 Published 2025-03-11 No fix listed CWE-79

TI-2024-34323 CVE-2024-51320 · GHSA-62qj-786m-q427

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an…

MEDIUM 58

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdm_fsave_htmltmp, /servlet/gsdm_btlk_openfile components

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00377 Published 2025-03-11 No fix listed CWE-79

TI-2021-18783 CVE-2021-42369 · GHSA-x3c3-8c4j-3cfx

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection.

MEDIUM 45

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0105 Published 2021-10-14 No fix listed CWE-89

TI-2019-13224 CVE-2019-18204 · GHSA-4v8w-5cm8-f73w

Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload…

MEDIUM 42

Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0173 Published 2019-10-30 No fix listed CWE-434

TI-2023-22524 CVE-2023-42232 · GHSA-xpjh-pqrp-82w9

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal…

MEDIUM 41

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00988 Published 2025-01-13 No fix listed CWE-22

TI-2023-22520 CVE-2023-42228 · GHSA-76f2-5pmw-p3qg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access…

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00459 Published 2025-01-13 No fix listed CWE-281

TI-2023-22519 CVE-2023-42227 · GHSA-7hp3-phw2-32fm

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2025-01-13 No fix listed CWE-22

TI-2023-22518 CVE-2023-42226 · GHSA-597v-4553-9qwg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal…

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2025-01-13 No fix listed CWE-22

TI-2023-22517 CVE-2023-42225 · GHSA-p666-mrx8-3rr4

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal…

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2025-01-13 No fix listed CWE-22

TI-2019-13226 CVE-2019-18206 · GHSA-3gv3-3m2j-wpx7

A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and…

LOW 38

A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00457 Published 2019-10-30 No fix listed CWE-352

TI-2019-07571 CVE-2019-10257 · GHSA-258v-r42g-96fx

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal.

LOW 37

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02384 Published 2019-06-19 No fix listed CWE-22

TI-2023-22523 CVE-2023-42231 · GHSA-983x-wcjm-36qg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access…

LOW 35

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00342 Published 2025-01-13 No fix listed CWE-281

TI-2023-22521 CVE-2023-42229 · GHSA-8vc8-wwv8-fh9j

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal.

LOW 30

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00712 Published 2025-01-13 No fix listed CWE-22

TI-2019-13225 CVE-2019-18205 · GHSA-qg48-gh7r-v9jq

Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti…

LOW 28

Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2019-10-30 No fix listed CWE-79

TI-2025-37994 CVE-2025-61431 · GHSA-4qqm-257h-w336

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp…

LOW 27

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier allows attackers to execute arbitrary Javascript in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2025-11-04 No fix listed CWE-79

TI-2025-32498 CVE-2025-52180 · GHSA-w3h9-r78g-92j8

Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier…

LOW 27

Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahi/jsp/gsfr_feditorHTML.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00262 Published 2025-10-30 No fix listed CWE-79

TI-2023-22525 CVE-2023-42233 · GHSA-32qp-fj94-7jhx

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting…

LOW 27

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2025-01-13 No fix listed CWE-79

TI-2023-22522 CVE-2023-42230 · GHSA-279f-qp3q-j675

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting…

LOW 27

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00291 Published 2025-01-13 No fix listed CWE-79

TI-2019-13227 CVE-2019-18207 · GHSA-3c96-cx8m-c77h

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject…

LOW 25

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00516 Published 2019-10-30 No fix listed CWE-79

TI-2023-22526 CVE-2023-42234 · GHSA-88gx-mvc3-9p77

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request…

LOW 24

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00178 Published 2025-01-13 No fix listed CWE-352

Open these records in search →

Critical	1
High	11
Medium	10
Low	0
No CVSS	0