CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 21/12/2020 |
| CVE-2019-16957 | 中危5.4 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. | 18/12/2020 |
| CVE-2019-16955 | 中危5.4 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. | 18/12/2020 |
| CVE-2019-20002 | 高危7.8 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a TicketActions/view?tab=group TSV export by an admin user. | 27/04/2020 |