Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: QNAP Component: Helpdesk Clear all filters
TI-2024-33827 CVE-2024-50394 · GHSA-9973-9x4h-pfgx

Improper certificate validation in QNAP Helpdesk

Priority LOW 35

An improper certificate validation vulnerability has been reported to affect Helpdesk.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00307 Published 2025-03-07 Fixed in 3.3.3 CWE-295
TI-2024-17981 CVE-2024-27125 · GHSA-2g3g-3px6-gf3h

Cross-site scripting in QNAP Helpdesk

Priority LOW 22

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00247 Published 2024-09-06 Fixed in 3.3.1 CWE-79
TI-2021-09805 CVE-2021-28814 · GHSA-c3j9-jwrq-h9fm

Improper Access Control Vulnerability in Helpdesk

Priority MEDIUM 41

An improper access control vulnerability has been reported to affect QNAP NAS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01225 Published 2021-06-11 Fixed in 3.0.4 CWE-269
TI-2020-02218 CVE-2020-2506 · GHSA-vph4-5mf4-28v5

improper access control vulnerability in Helpdesk

Priority CRITICAL 99KEV

The vulnerability have been reported to affect earlier versions of QTS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02006 Published 2021-02-03 Fixed in 3.0.3 CWE-284
TI-2020-02219 CVE-2020-2507 · GHSA-7r29-w7vh-5p6q

command injection vulnerability in Helpdesk

Priority MEDIUM 48

The vulnerability have been reported to affect earlier versions of QTS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03079 Published 2021-02-03 Fixed in 3.0.3 CWE-77
TI-2018-14134 CVE-2018-19946 · GHSA-j6wf-jr95-r768

Improper certificate validation in QNAP Helpdesk

Priority LOW 26

The vulnerability have been reported to affect earlier versions of Helpdesk.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00315 Published 2020-09-11 Fixed in 3.0.3 CWE-295
TI-2018-14135 CVE-2018-19947 · GHSA-h4wq-q9hr-ffm6

Information disclosure in QNAP Helpdesk

Priority LOW 30

The vulnerability have been reported to affect earlier versions of Helpdesk.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00755 Published 2020-09-11 Fixed in 3.0.3 CWE-200
TI-2018-14136 CVE-2018-19948 · GHSA-m2q3-43wc-p9w4

Cross-site request forgery in QNAP Helpdesk

Priority LOW 29

The vulnerability have been reported to affect earlier versions of Helpdesk.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00296 Published 2020-09-11 Fixed in 3.0.3 CWE-352
TI-2020-02212 CVE-2020-2500 · GHSA-v7p7-qff5-5j8w

Improper access control in QNAP Helpdesk

Priority MEDIUM 43

This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00745 Published 2020-07-01 Fixed in 3.0.1 CWE-284
TI-2018-00677 CVE-2018-0728 · GHSA-x36q-229j-mv7q

Improper privilege management in QNAP NAS devices

Priority LOW 35

This improper access control vulnerability in Helpdesk allows attackers to access the system logs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01273 Published 2019-12-04 No fix listed CWE-269
TI-2018-00668 CVE-2018-0714 · GHSA-r8j4-9jg8-cj5q

Command injection in QNAP Helpdesk in QTS

Priority MEDIUM 46

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02251 Published 2018-08-13 No fix listed CWE-77