Read the docs
TI-2017-04953 Aliases CVE-2017-7276GHSA-25mr-v3vc-44xm

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

Why it matters now

EPSS 0.00635 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 113

CPEVersionsRoleVendor
cpe:2.3:a:topdesk:topdesk:*:*:*:*:*:*:*:*up to 5.7.5VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.001:*:*:*:*:*:*:*6.04.001VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.005:*:*:*:*:*:*:*6.04.005VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.006:*:*:*:*:*:*:*6.04.006VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.008:*:*:*:*:*:*:*6.04.008VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.011:*:*:*:*:*:*:*6.04.011VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.012:*:*:*:*:*:*:*6.04.012VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.013:*:*:*:*:*:*:*6.04.013VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.015:*:*:*:*:*:*:*6.04.015VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.04.016:*:*:*:*:*:*:*6.04.016VulnerableTopdesk
  • cpe:2.3:a:topdesk:topdesk:*:*:*:*:*:*:*:* Versions up to 5.7.5 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.001:*:*:*:*:*:*:* Versions 6.04.001 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.005:*:*:*:*:*:*:* Versions 6.04.005 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.006:*:*:*:*:*:*:* Versions 6.04.006 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.008:*:*:*:*:*:*:* Versions 6.04.008 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.011:*:*:*:*:*:*:* Versions 6.04.011 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.012:*:*:*:*:*:*:* Versions 6.04.012 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.013:*:*:*:*:*:*:* Versions 6.04.013 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.015:*:*:*:*:*:*:* Versions 6.04.015 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.04.016:*:*:*:*:*:*:* Versions 6.04.016 Vulnerable ·Topdesk
Show 103 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:topdesk:topdesk:6.05.002:*:*:*:*:*:*:*6.05.002VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.006:*:*:*:*:*:*:*6.05.006VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.007:*:*:*:*:*:*:*6.05.007VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.008:*:*:*:*:*:*:*6.05.008VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.009:*:*:*:*:*:*:*6.05.009VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.010:*:*:*:*:*:*:*6.05.010VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.016:*:*:*:*:*:*:*6.05.016VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.05.017:*:*:*:*:*:*:*6.05.017VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.002:*:*:*:*:*:*:*6.06.002VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.003:*:*:*:*:*:*:*6.06.003VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.004:*:*:*:*:*:*:*6.06.004VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.005:*:*:*:*:*:*:*6.06.005VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.006:*:*:*:*:*:*:*6.06.006VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.007:*:*:*:*:*:*:*6.06.007VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.013:*:*:*:*:*:*:*6.06.013VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.014:*:*:*:*:*:*:*6.06.014VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.06.020:*:*:*:*:*:*:*6.06.020VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.002:*:*:*:*:*:*:*6.07.002VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.005:*:*:*:*:*:*:*6.07.005VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.007:*:*:*:*:*:*:*6.07.007VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.010:*:*:*:*:*:*:*6.07.010VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.014:*:*:*:*:*:*:*6.07.014VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.019:*:*:*:*:*:*:*6.07.019VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.022:*:*:*:*:*:*:*6.07.022VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.07.023:*:*:*:*:*:*:*6.07.023VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.001:*:*:*:*:*:*:*6.08.001VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.011:*:*:*:*:*:*:*6.08.011VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.016:*:*:*:*:*:*:*6.08.016VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.020:*:*:*:*:*:*:*6.08.020VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.021:*:*:*:*:*:*:*6.08.021VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.024:*:*:*:*:*:*:*6.08.024VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.025:*:*:*:*:*:*:*6.08.025VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.029:*:*:*:*:*:*:*6.08.029VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.030:*:*:*:*:*:*:*6.08.030VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.031:*:*:*:*:*:*:*6.08.031VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.033:*:*:*:*:*:*:*6.08.033VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.08.034:*:*:*:*:*:*:*6.08.034VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.001:*:*:*:*:*:*:*6.09.001VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.005:*:*:*:*:*:*:*6.09.005VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.010:*:*:*:*:*:*:*6.09.010VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.011:*:*:*:*:*:*:*6.09.011VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.012:*:*:*:*:*:*:*6.09.012VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.013:*:*:*:*:*:*:*6.09.013VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.014:*:*:*:*:*:*:*6.09.014VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.015:*:*:*:*:*:*:*6.09.015VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.017:*:*:*:*:*:*:*6.09.017VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.018:*:*:*:*:*:*:*6.09.018VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.019:*:*:*:*:*:*:*6.09.019VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.021:*:*:*:*:*:*:*6.09.021VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.022:*:*:*:*:*:*:*6.09.022VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.023:*:*:*:*:*:*:*6.09.023VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.09.024:*:*:*:*:*:*:*6.09.024VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.008:*:*:*:*:*:*:*6.10.008VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.015:*:*:*:*:*:*:*6.10.015VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.021:*:*:*:*:*:*:*6.10.021VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.022:*:*:*:*:*:*:*6.10.022VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.025:*:*:*:*:*:*:*6.10.025VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.026:*:*:*:*:*:*:*6.10.026VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.027:*:*:*:*:*:*:*6.10.027VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.037:*:*:*:*:*:*:*6.10.037VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.10.040:*:*:*:*:*:*:*6.10.040VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.11.003:*:*:*:*:*:*:*6.11.003VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.11.015:*:*:*:*:*:*:*6.11.015VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.11.024:*:*:*:*:*:*:*6.11.024VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.11.030:*:*:*:*:*:*:*6.11.030VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.006:*:*:*:*:*:*:*6.12.006VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.007:*:*:*:*:*:*:*6.12.007VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.008:*:*:*:*:*:*:*6.12.008VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.013:*:*:*:*:*:*:*6.12.013VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.015:*:*:*:*:*:*:*6.12.015VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.020:*:*:*:*:*:*:*6.12.020VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.022:*:*:*:*:*:*:*6.12.022VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.025:*:*:*:*:*:*:*6.12.025VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:6.12.026:*:*:*:*:*:*:*6.12.026VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.01.001:*:*:*:*:*:*:*7.01.001VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.01.008:*:*:*:*:*:*:*7.01.008VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.01.020:*:*:*:*:*:*:*7.01.020VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.01.024:*:*:*:*:*:*:*7.01.024VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.02.012:*:*:*:*:*:*:*7.02.012VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.02.013:*:*:*:*:*:*:*7.02.013VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.02.014:*:*:*:*:*:*:*7.02.014VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.02.016:*:*:*:*:*:*:*7.02.016VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.02.021:*:*:*:*:*:*:*7.02.021VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.03.007:*:*:*:*:*:*:*7.03.007VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.03.008:*:*:*:*:*:*:*7.03.008VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.03.018:*:*:*:*:*:*:*7.03.018VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.03.019:*:*:*:*:*:*:*7.03.019VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.03.020:*:*:*:*:*:*:*7.03.020VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.03.022:*:*:*:*:*:*:*7.03.022VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.04.001:*:*:*:*:*:*:*7.04.001VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.04.004:*:*:*:*:*:*:*7.04.004VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.04.019:*:*:*:*:*:*:*7.04.019VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.04.021:*:*:*:*:*:*:*7.04.021VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.04.023:*:*:*:*:*:*:*7.04.023VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.05.006:*:*:*:*:*:*:*7.05.006VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.05.007:*:*:*:*:*:*:*7.05.007VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.05.020:*:*:*:*:*:*:*7.05.020VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.05.023:*:*:*:*:*:*:*7.05.023VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.06.001:*:*:*:*:*:*:*7.06.001VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.06.005:*:*:*:*:*:*:*7.06.005VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.06.010:*:*:*:*:*:*:*7.06.010VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.06.011:*:*:*:*:*:*:*7.06.011VulnerableTopdesk
cpe:2.3:a:topdesk:topdesk:7.06.014:*:*:*:*:*:*:*7.06.014VulnerableTopdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.002:*:*:*:*:*:*:* Versions 6.05.002 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.006:*:*:*:*:*:*:* Versions 6.05.006 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.007:*:*:*:*:*:*:* Versions 6.05.007 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.008:*:*:*:*:*:*:* Versions 6.05.008 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.009:*:*:*:*:*:*:* Versions 6.05.009 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.010:*:*:*:*:*:*:* Versions 6.05.010 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.016:*:*:*:*:*:*:* Versions 6.05.016 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.05.017:*:*:*:*:*:*:* Versions 6.05.017 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.002:*:*:*:*:*:*:* Versions 6.06.002 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.003:*:*:*:*:*:*:* Versions 6.06.003 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.004:*:*:*:*:*:*:* Versions 6.06.004 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.005:*:*:*:*:*:*:* Versions 6.06.005 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.006:*:*:*:*:*:*:* Versions 6.06.006 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.007:*:*:*:*:*:*:* Versions 6.06.007 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.013:*:*:*:*:*:*:* Versions 6.06.013 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.014:*:*:*:*:*:*:* Versions 6.06.014 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.06.020:*:*:*:*:*:*:* Versions 6.06.020 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.002:*:*:*:*:*:*:* Versions 6.07.002 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.005:*:*:*:*:*:*:* Versions 6.07.005 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.007:*:*:*:*:*:*:* Versions 6.07.007 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.010:*:*:*:*:*:*:* Versions 6.07.010 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.014:*:*:*:*:*:*:* Versions 6.07.014 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.019:*:*:*:*:*:*:* Versions 6.07.019 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.022:*:*:*:*:*:*:* Versions 6.07.022 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.07.023:*:*:*:*:*:*:* Versions 6.07.023 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.001:*:*:*:*:*:*:* Versions 6.08.001 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.011:*:*:*:*:*:*:* Versions 6.08.011 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.016:*:*:*:*:*:*:* Versions 6.08.016 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.020:*:*:*:*:*:*:* Versions 6.08.020 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.021:*:*:*:*:*:*:* Versions 6.08.021 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.024:*:*:*:*:*:*:* Versions 6.08.024 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.025:*:*:*:*:*:*:* Versions 6.08.025 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.029:*:*:*:*:*:*:* Versions 6.08.029 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.030:*:*:*:*:*:*:* Versions 6.08.030 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.031:*:*:*:*:*:*:* Versions 6.08.031 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.033:*:*:*:*:*:*:* Versions 6.08.033 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.08.034:*:*:*:*:*:*:* Versions 6.08.034 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.001:*:*:*:*:*:*:* Versions 6.09.001 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.005:*:*:*:*:*:*:* Versions 6.09.005 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.010:*:*:*:*:*:*:* Versions 6.09.010 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.011:*:*:*:*:*:*:* Versions 6.09.011 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.012:*:*:*:*:*:*:* Versions 6.09.012 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.013:*:*:*:*:*:*:* Versions 6.09.013 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.014:*:*:*:*:*:*:* Versions 6.09.014 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.015:*:*:*:*:*:*:* Versions 6.09.015 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.017:*:*:*:*:*:*:* Versions 6.09.017 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.018:*:*:*:*:*:*:* Versions 6.09.018 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.019:*:*:*:*:*:*:* Versions 6.09.019 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.021:*:*:*:*:*:*:* Versions 6.09.021 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.022:*:*:*:*:*:*:* Versions 6.09.022 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.023:*:*:*:*:*:*:* Versions 6.09.023 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.09.024:*:*:*:*:*:*:* Versions 6.09.024 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.008:*:*:*:*:*:*:* Versions 6.10.008 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.015:*:*:*:*:*:*:* Versions 6.10.015 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.021:*:*:*:*:*:*:* Versions 6.10.021 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.022:*:*:*:*:*:*:* Versions 6.10.022 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.025:*:*:*:*:*:*:* Versions 6.10.025 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.026:*:*:*:*:*:*:* Versions 6.10.026 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.027:*:*:*:*:*:*:* Versions 6.10.027 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.037:*:*:*:*:*:*:* Versions 6.10.037 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.10.040:*:*:*:*:*:*:* Versions 6.10.040 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.11.003:*:*:*:*:*:*:* Versions 6.11.003 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.11.015:*:*:*:*:*:*:* Versions 6.11.015 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.11.024:*:*:*:*:*:*:* Versions 6.11.024 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.11.030:*:*:*:*:*:*:* Versions 6.11.030 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.006:*:*:*:*:*:*:* Versions 6.12.006 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.007:*:*:*:*:*:*:* Versions 6.12.007 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.008:*:*:*:*:*:*:* Versions 6.12.008 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.013:*:*:*:*:*:*:* Versions 6.12.013 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.015:*:*:*:*:*:*:* Versions 6.12.015 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.020:*:*:*:*:*:*:* Versions 6.12.020 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.022:*:*:*:*:*:*:* Versions 6.12.022 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.025:*:*:*:*:*:*:* Versions 6.12.025 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:6.12.026:*:*:*:*:*:*:* Versions 6.12.026 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.01.001:*:*:*:*:*:*:* Versions 7.01.001 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.01.008:*:*:*:*:*:*:* Versions 7.01.008 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.01.020:*:*:*:*:*:*:* Versions 7.01.020 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.01.024:*:*:*:*:*:*:* Versions 7.01.024 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.02.012:*:*:*:*:*:*:* Versions 7.02.012 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.02.013:*:*:*:*:*:*:* Versions 7.02.013 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.02.014:*:*:*:*:*:*:* Versions 7.02.014 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.02.016:*:*:*:*:*:*:* Versions 7.02.016 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.02.021:*:*:*:*:*:*:* Versions 7.02.021 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.03.007:*:*:*:*:*:*:* Versions 7.03.007 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.03.008:*:*:*:*:*:*:* Versions 7.03.008 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.03.018:*:*:*:*:*:*:* Versions 7.03.018 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.03.019:*:*:*:*:*:*:* Versions 7.03.019 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.03.020:*:*:*:*:*:*:* Versions 7.03.020 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.03.022:*:*:*:*:*:*:* Versions 7.03.022 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.04.001:*:*:*:*:*:*:* Versions 7.04.001 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.04.004:*:*:*:*:*:*:* Versions 7.04.004 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.04.019:*:*:*:*:*:*:* Versions 7.04.019 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.04.021:*:*:*:*:*:*:* Versions 7.04.021 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.04.023:*:*:*:*:*:*:* Versions 7.04.023 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.05.006:*:*:*:*:*:*:* Versions 7.05.006 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.05.007:*:*:*:*:*:*:* Versions 7.05.007 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.05.020:*:*:*:*:*:*:* Versions 7.05.020 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.05.023:*:*:*:*:*:*:* Versions 7.05.023 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.06.001:*:*:*:*:*:*:* Versions 7.06.001 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.06.005:*:*:*:*:*:*:* Versions 7.06.005 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.06.010:*:*:*:*:*:*:* Versions 7.06.010 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.06.011:*:*:*:*:*:*:* Versions 7.06.011 Vulnerable ·Topdesk
  • cpe:2.3:a:topdesk:topdesk:7.06.014:*:*:*:*:*:*:* Versions 7.06.014 Vulnerable ·Topdesk

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-7276
  2. 2026-10-03 Alias added: GHSA-25mr-v3vc-44xm
  3. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2023-17432 XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12… CVSS 3.1HIGH 8.1
  • TI-2018-07256 Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018… CVSS 3.1MEDIUM 6.5
  • TI-2018-07255 Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version)… CVSS 3.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences