Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Hesk Clear all filters
TI-2020-10878 CVE-2020-13897 · GHSA-q24j-hrpr-2rwg

HESK before 3.1.10 allows reflected XSS.

Priority LOW 28

HESK before 3.1.10 allows reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2020-06-07 No fix listed CWE-79
TI-2011-03300 CVE-2011-3743 · GHSA-82qp-gqq6-9qgr

Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to…

Priority LOW 26

Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/footer.inc.php and certain other files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200