Skip to content
Gfi Software Helpdesk vulnerabilities
-
frappe helpdesk
Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation
CVE-2026-111939
5.1 Medium
-
faveo helpdesk
Faveo Helpdesk Logo SettingsController.php unlink path traversal
CVE-2026-78435
5.1 Medium
-
faveo helpdesk
Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication
CVE-2026-78434
6.9 Medium
-
gfi helpdesk
GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter
CVE-2026-23753
4.8 Medium
-
gfi helpdesk
GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter
CVE-2026-23752
4.8 Medium
-
gfi helpdesk
GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject
CVE-2026-23756
5.1 Medium
-
gfi helpdesk
GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter
CVE-2026-23758
5.1 Medium
-
gfi helpdesk
GFI HelpDesk < 4.99.10 Stored XSS via Reports Module
CVE-2026-23757
5.1 Medium
-
gfi software helpdesk
Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via...
CVE-2024-58343
4.3 Medium
-
gfi software helpdesk
Helpdesk
CVE-2024-50394
7.7 High
-
gfi software helpdesk
Helpdesk
CVE-2024-27125
3.5 Low
-
gfi software helpdesk
Improper Access Control Vulnerability in Helpdesk
CVE-2021-28814
8.8 High
-
gfi software helpdesk
improper access control vulnerability in Helpdesk
CVE-2020-2506
In KEV
7.3 High
-
gfi software helpdesk
command injection vulnerability in Helpdesk
CVE-2020-2507
9.8 Critical
-
gfi software helpdesk
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this...
CVE-2018-19946
4.2 Medium
-
gfi software helpdesk
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this...
CVE-2018-19947
4.3 Medium
-
gfi software helpdesk
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this...
CVE-2018-19948
2.0 Low
-
gfi software helpdesk
This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP...
CVE-2020-2500
9.8 Critical