Help Desk
10 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Help Desk, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
Help Desk CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High1
- Medium6
Latest CVEs
The 10 most recently published vulnerabilities affecting Help Desk.
- CVE-2021-33353Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.9.8
- CVE-2021-33351Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket messag...9.0
- CVE-2021-33352An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.9.8
- CVE-2022-40325SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.6.1
- CVE-2022-40324SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.6.1
- CVE-2022-40323SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.6.1
- CVE-2022-40322SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.6.1
- CVE-2019-16958Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name.5.4
- CVE-2007-4716Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.7.5
- CVE-2006-6158Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbit...6.8
Product grouping is registry-driven, with AI assist and human review. How it works