topdesk records
4 published records for vendor topdesk.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2023-34923No exploit | XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate witopdesk · topdesk · CWE-863 | High8.1 | — | 0.7% | Jun 22, 2023 |
26Monitor | CVE-2018-10232No exploit | Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers totopdesk · topdesk · CWE-352 | Medium6.5 | — | 0.5% | Jul 11, 2018 |
24Monitor | CVE-2018-10231No exploit | Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to injecttopdesk · topdesk · CWE-79 | Medium6.1 | — | 0.7% | Jul 11, 2018 |
24Monitor | CVE-2017-7276No exploit | There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.topdesk · topdesk · CWE-79 | Medium6.1 | — | 0.6% | Jul 4, 2017 |
- CVE-2023-3492332Monitor
XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate wi
HighCVSS 8.1No exploitEPSS 0%topdesk · topdeskJun 22, 2023
- CVE-2018-1023226Monitor
Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to
MediumCVSS 6.5No exploitEPSS 0%topdesk · topdeskJul 11, 2018
- CVE-2018-1023124Monitor
Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to inject
MediumCVSS 6.1No exploitEPSS 0%topdesk · topdeskJul 11, 2018
- CVE-2017-727624Monitor
There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
MediumCVSS 6.1No exploitEPSS 0%topdesk · topdeskJul 4, 2017