Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Akinsoft LimonDesk v1.02.17 Clear all filters
TI-2025-02130 CVE-2025-2416 · GHSA-pm7h-7jrp-x78p

OTP Bypass in Akinsoft's LimonDesk

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-03 Fixed in v1.02.17 CWE-307
TI-2025-00746 CVE-2025-0878 · GHSA-g589-hq5q-555g

XSS in Akinsoft's LimonDesk

Priority LOW 21

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft LimonDesk allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00242 Published 2025-09-03 Fixed in v1.02.17 CWE-79
TI-2024-12116 CVE-2024-13068 · GHSA-26g5-rwh8-qcmq

Host Header Injection in Akinsoft's LimonDesk

Priority LOW 37

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00153 Published 2025-09-03 Fixed in v1.02.17 CWE-346
TI-2024-12114 CVE-2024-13066 · GHSA-cxmc-4262-jq82

iFrame Injection in Akinsoft's LimonDesk

Priority LOW 19

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking.

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00178 Published 2025-09-03 Fixed in v1.02.17 CWE-1021