Approved changes feed: RSS · Atom
cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Helpdesk (c3118e21-3081-5d41-b6de-04ce8d9195f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-50394 |
vulnerable | 2026-06-08 06:52:09.936614 |
Helpdesk
An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.
We have already fixed the vulnerability in the following version:
Helpdesk 3.3.3 and later
Published: 2025-03-07T16:13:11.034Z
Updated: 2025-03-07T18:02:58.278Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27125 |
vulnerable | 2026-06-08 06:31:27.629009 |
Helpdesk
LOW (3.5)
A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network.
We have already fixed the vulnerability in the following version:
Helpdesk 3.3.1 and later
Published: 2024-09-06T16:27:17.757Z
Updated: 2024-09-06T17:33:18.291Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28814 |
vulnerable | 2026-06-08 05:31:24.936210 |
Improper Access Control Vulnerability in Helpdesk
HIGH (8.8)
An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise the security of the software. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.4.
Published: 2021-06-11T06:35:15.709Z
Updated: 2024-09-17T03:58:40.524Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2507 |
vulnerable | 2026-06-08 05:24:59.338034 |
command injection vulnerability in Helpdesk
CRITICAL (9.8)
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.
Published: 2021-02-03T15:51:16.772Z
Updated: 2024-09-16T19:40:15.957Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2506 |
vulnerable | 2026-06-08 05:24:59.337560 |
improper access control vulnerability in Helpdesk
HIGH (7.3)
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.
Published: 2021-02-03T15:51:38.031Z
Updated: 2025-10-21T23:35:29.111Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2500 |
vulnerable | 2026-06-08 05:24:59.328892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19948 |
vulnerable | 2026-06-08 05:11:16.464594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19947 |
vulnerable | 2026-06-08 05:11:16.464120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19946 |
vulnerable | 2026-06-08 05:11:16.463551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0728 |
vulnerable | 2026-06-08 05:10:24.578026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0714 |
vulnerable | 2026-06-08 05:10:24.564659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.