Approved changes feed: RSS · Atom

cpe:2.3:a:landesk:landesk_management_suite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLandesk (c016bc34-267c-5ba9-87a1-85fc50588a77)
ProductLandesk Management Suite (85dae609-d81c-52de-b954-cbeaa00ebf99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5362 vulnerable 2026-06-08 05:05:47.749856 Details available
The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1) ldms/sm_actionfrm.asp or (2) remote/frm_coremainfrm.aspx; or the (3) top parameter to remote/frm_splitfrm.aspx.
Published: 2017-09-19T15:00:00.000Z
Updated: 2024-08-06T11:41:49.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5361 vulnerable 2026-06-08 05:05:47.749499 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) start, (2) stop, or (3) restart services via a request to remote/serverServices.aspx.
Published: 2015-04-21T15:00:00.000Z
Updated: 2024-08-06T11:41:48.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5360 vulnerable 2026-06-08 05:05:47.749091 Details available
Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter to remote/serverlist_grouptree.aspx.
Published: 2015-02-03T16:00:00.000Z
Updated: 2024-08-06T11:41:49.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6195 vulnerable 2026-06-08 04:50:54.451561 Details available
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643.
Published: 2009-02-20T00:00:00.000Z
Updated: 2024-08-07T11:20:25.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2468 vulnerable 2026-06-08 04:50:24.126776 Details available
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
Published: 2008-09-17T18:06:00.000Z
Updated: 2024-08-07T09:05:30.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.