Freshworks records
3 published records for vendor Freshworks.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-295 Improper Certificate Validation1
- CWE-354 Improper Validation of Integrity Check Value1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
32Monitor | CVE-2022-36173No exploit | FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and sfreshworks · freshservice agent · CWE-295 | High8.1 | 0.9%Sep 12, 2022 |
32Monitor | CVE-2022-36174No exploit | FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0.freshworks · freshservice agent · CWE-354 | High8.1 | 0.5%Sep 12, 2022 |
24Monitor | CVE-2015-10102No exploit | Freshdesk Plugin redirectfreshworks · freshdesk · CWE-601 | Medium6.1 | 0.4%Apr 17, 2023 |
- CVE-2022-3617332Monitor
FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and s
HighCVSS 8.1No exploitEPSS 0%freshworks · freshservice agentSep 12, 2022
- CVE-2022-3617432Monitor
FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0.
HighCVSS 8.1No exploitEPSS 0%freshworks · freshservice agentSep 12, 2022
- CVE-2015-1010224Monitor
Freshdesk Plugin redirect
MediumCVSS 6.1No exploitEPSS 0%freshworks · freshdeskApr 17, 2023