Zendesk kayıtları
zendesk üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-502 Deserialization of Untrusted Data1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2021-36750Kavram kanıtı | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVauzendesk · enc datavault · CWE-307 | Yüksek8,1 | — | %13,5 | 22 Ara 2021 |
35İzleyin | CVE-2024-42363İstismar yok | GHSL-2023-136_Samsonzendesk · samson · CWE-502 | Yüksek8,8 | — | %1,1 | 20 Ağu 2024 |
30İzleyin | CVE-2018-20857İstismar yok | Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->.zendesk · samlr · CWE-20 | Yüksek7,5 | — | %1,2 | 26 Tem 2019 |
30İzleyin | CVE-2024-49193İstismar yok | Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming CWE-290 | Yüksek7,5 | — | %0,6 | 12 Eki 2024 |
10İzleyin | CVE-2015-6921İstismar yok | Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators wzendesk · zendesk feedback tab · CWE-79 | Düşük2,6 | — | %0,7 | 11 Eyl 2015 |
- CVE-2021-3675036İzleyin
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVau
YüksekCVSS 8,1Kavram kanıtıEPSS %13zendesk · enc datavault22 Ara 2021
- CVE-2024-4236335İzleyin
GHSL-2023-136_Samson
YüksekCVSS 8,8İstismar yokEPSS %1zendesk · samson20 Ağu 2024
- CVE-2018-2085730İzleyin
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->.
YüksekCVSS 7,5İstismar yokEPSS %1zendesk · samlr26 Tem 2019
- CVE-2024-4919330İzleyin
Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming
YüksekCVSS 7,5İstismar yokEPSS %012 Eki 2024
- CVE-2015-692110İzleyin
Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators w
DüşükCVSS 2,6İstismar yokEPSS %0zendesk · zendesk feedback tab11 Eyl 2015