QNAP Systems Inc. Helpdesk
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-50394 | 3.3.x – < 3.3.3 | Helpdesk | HIGH 7.7 | 0.3 % | ||
| CVE-2024-27125 | 3.3.x – < 3.3.1 | Helpdesk | MEDIUM 4.8 | 0.2 % | ||
| CVE-2021-28814 | unspecified – < 3.0.4 | Improper Access Control Vulnerability in Helpdesk | HIGH 8.8 | 1.2 % | ||
| CVE-2020-2506 | unspecified – < 3.0.3 | improper access control vulnerability in Helpdesk | CRITICAL 9.8 | 2.0 % | KEV | |
| CVE-2020-2507 | unspecified – < 3.0.3 | command injection vulnerability in Helpdesk | CRITICAL 9.8 | 3.1 % | ||
| CVE-2018-19946 | unspecified – < 3.0.3 | The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerabilit | MEDIUM 5.9 | 0.3 % | ||
| CVE-2018-19947 | unspecified – < 3.0.3 | The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could dis | MEDIUM 6.5 | 0.8 % | ||
| CVE-2018-19948 | unspecified – < 3.0.3 | The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerabil | MEDIUM 6.5 | 0.3 % | ||
| CVE-2020-2500 | unspecified – < 3.0.1 | This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sens | CRITICAL 9.8 | 0.7 % |