TI-2025-19719 CVE-2025-26846 · GHSA-m53m-r8mm-799v
An issue was discovered in Znuny before 7.1.4.
Priority MEDIUM 49
An issue was discovered in Znuny before 7.1.4.
Vulnerabilities
11 records
TI-2025-28493 CVE-2025-43926 · GHSA-6mp7-r3w8-3vrm
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6.
Priority LOW 27
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6.
TI-2025-19720 CVE-2025-26847 · GHSA-crjm-f8jp-7pww
An issue was discovered in Znuny before 7.1.5.
Priority MEDIUM 45
An issue was discovered in Znuny before 7.1.5.
TI-2025-19718 CVE-2025-26845 · GHSA-8hx2-3q2m-9xxf
An Eval Injection issue was discovered in Znuny through 7.1.3.
Priority MEDIUM 49
An Eval Injection issue was discovered in Znuny through 7.1.3.
TI-2025-19717 CVE-2025-26844 · GHSA-qjp8-wwq5-32hp
An issue was discovered in Znuny through 7.1.3.
Priority MEDIUM 49
An issue was discovered in Znuny through 7.1.3.
TI-2025-19716 CVE-2025-26842 · GHSA-c2x5-mpj8-v9v9
An issue was discovered in Znuny through 7.1.3.
Priority LOW 39
An issue was discovered in Znuny through 7.1.3.
TI-2024-32631 CVE-2024-48938 · GHSA-pjf2-268r-g6x9
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.
Priority LOW 34
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.
TI-2024-32630 CVE-2024-48937 · GHSA-q6x3-2mmr-2q9c
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS.
Priority LOW 27
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS.
TI-2024-21385 CVE-2024-32493 · GHSA-j46p-v4gj-3jj5
An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16…
Priority LOW 39
An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request.
TI-2024-21384 CVE-2024-32492 · GHSA-c75w-9qpm-w8gc
An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the…
Priority LOW 34
An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript.
TI-2024-21383 CVE-2024-32491 · GHSA-fg45-47x2-7rw4
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1…
Priority MEDIUM 44
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing…