Lansweeper vulnerabilities

Products

• Lansweeper 18

Newest

• lansweeper A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml... CVE-2022-32763 9.1 CriticalDecember 15, 2022
• lansweeper A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of... CVE-2022-32573 9.9 CriticalDecember 15, 2022
• lansweeper A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality... CVE-2022-29517 EPSS 57.6% 9.9 CriticalDecember 15, 2022
• lansweeper A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles... CVE-2022-29511 9.1 CriticalDecember 15, 2022
• lansweeper A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages... CVE-2022-28703 9.1 CriticalDecember 15, 2022
• lansweeper A directory traversal vulnerability exists in the TicketTemplateActions.aspx... CVE-2022-27498 EPSS 38.3% 9.1 CriticalDecember 15, 2022
• lansweeper A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper... CVE-2022-22149 EPSS 72.6% 9.1 CriticalApril 14, 2022
• lansweeper An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper... CVE-2022-21234 EPSS 72.6% 9.1 CriticalApril 14, 2022
• lansweeper An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper... CVE-2022-21210 EPSS 71.2% 6.6 MediumApril 14, 2022
• lansweeper A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of... CVE-2022-21145 EPSS 77.8% 9.1 CriticalApril 14, 2022
• lansweeper In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low... CVE-2020-13658 8.0 HighSeptember 29, 2020
• lansweeper Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is... CVE-2020-14011 Public exploit EPSS 29.5% 9.8 CriticalJune 15, 2020
• lansweeper The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been... CVE-2019-18955 6.1 MediumDecember 19, 2019
• lansweeper Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. CVE-2019-13462 EPSS 11.3% 9.1 CriticalAugust 12, 2019
• lansweeper Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the... CVE-2015-9264 9.8 CriticalAugust 27, 2018
• lansweeper LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx. CVE-2017-16841 Public exploit 6.1 MediumNovember 16, 2017
• lansweeper XML external entity (XXE) vulnerability in the import package functionality of the deployment... CVE-2017-13706 9.9 CriticalOctober 10, 2017
• lansweeper Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782. CVE-2017-9292 6.1 MediumMay 29, 2017