Zucchetti

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Zucchetti records in CISA KEV

No Zucchetti vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Helpdeskadvanced 10 records MEDIUM Ad Hoc Infinity 5 records HIGH Infobusiness 4 records MEDIUM Hr Portal 1 record LOW Imagicle Uc Suite 1 record MEDIUM Infinity Zmaintenance 1 record LOW Infinity Zucchetti 1 record LOW

Records

10 records in Helpdeskadvanced · all components

TI-2023-22524 CVE-2023-42232 · GHSA-xpjh-pqrp-82w9

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal…

MEDIUM 41

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00988 Published 2025-01-13 No fix listed CWE-22

TI-2023-22520 CVE-2023-42228 · GHSA-76f2-5pmw-p3qg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access…

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00459 Published 2025-01-13 No fix listed CWE-281

TI-2023-22519 CVE-2023-42227 · GHSA-7hp3-phw2-32fm

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2025-01-13 No fix listed CWE-22

TI-2023-22518 CVE-2023-42226 · GHSA-597v-4553-9qwg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal…

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2025-01-13 No fix listed CWE-22

TI-2023-22517 CVE-2023-42225 · GHSA-p666-mrx8-3rr4

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal…

MEDIUM 40

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2025-01-13 No fix listed CWE-22

TI-2023-22523 CVE-2023-42231 · GHSA-983x-wcjm-36qg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access…

LOW 35

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00342 Published 2025-01-13 No fix listed CWE-281

TI-2023-22521 CVE-2023-42229 · GHSA-8vc8-wwv8-fh9j

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal.

LOW 30

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00712 Published 2025-01-13 No fix listed CWE-22

TI-2023-22525 CVE-2023-42233 · GHSA-32qp-fj94-7jhx

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting…

LOW 27

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2025-01-13 No fix listed CWE-79

TI-2023-22522 CVE-2023-42230 · GHSA-279f-qp3q-j675

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting…

LOW 27

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00291 Published 2025-01-13 No fix listed CWE-79

TI-2023-22526 CVE-2023-42234 · GHSA-88gx-mvc3-9p77

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request…

LOW 24

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00178 Published 2025-01-13 No fix listed CWE-352

Open these records in search →

Critical	1
High	11
Medium	10
Low	0
No CVSS	0