Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: vsDesk Clear all filters
TI-2025-13341 CVE-2025-14601 · GHSA-mjxg-34vj-37wc

vsDesk Task Scheduler OS Command Injection

Priority MEDIUM 41

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01061 Published 2026-08-20 Fixed in 14.0101 CWE-676
TI-2025-13342 CVE-2025-14602 · GHSA-2vv3-69qg-3hgr

Weak File Name Generation in vsDesk

Priority LOW 24

The application generates uploaded file names using a weak and predictable method based on the request timestamp.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00465 Published 2026-08-20 Fixed in 14.0101 CWE-340
TI-2025-13340 CVE-2025-14600 · GHSA-r87r-w586-7rg3

Admin Account Takeover via Path Traversal in vsDesk

Priority MEDIUM 49

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00513 Published 2026-08-19 Fixed in 14.0402 CWE-305