Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2019-16961

Disclosure Date: January 15, 2021 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.
Attacker Value
Unknown

CVE-2019-16954

Disclosure Date: January 06, 2021 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.
Attacker Value
Unknown

CVE-2019-16960

Disclosure Date: January 04, 2021 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field.
Attacker Value
Unknown

CVE-2019-16956

Disclosure Date: January 04, 2021 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.