Vulnerabilities in uvdesk

6 results

Vexday analysis

UVDesk apresenta footprint reduzido na base com apenas 2 CVEs catalogadas, nenhuma atualmente sob ataque ativo ou com classificação crítica. A fraqueza dominante identificada (CWE-269 - Improper Access Control) sugere vulnerabilidades em controle de acesso, embora o risco imediato seja baixo dado que nenhuma foi publicada nos últimos 90 dias.

CVE-2023-1197MEDIUMCross-site Scripting (XSS) - Stored in uvdesk/community-skeletonEPSS 0.4%CVE-2024-3137HIGHImproper Privilege Management in uvdesk/community-skeletonEPSS 0.4%CVE-2026-92805CRITICALUVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation WizardEPSS 0.3%CVE-2025-71420MEDIUMUVdesk core-framework before 1.1.7 Authorization Bypass via Saved ReplyEPSS —CVE-2025-71419MEDIUMUVdesk core-framework before 1.1.7 Stored XSS via SwiftMailerEPSS —CVE-2025-71421HIGHUVdesk core-framework before 1.1.7 Privilege Escalation via editAgentEPSS —