Approved changes feed: RSS · Atom

cpe:2.3:a:servicetonic:servicetonic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorServicetonic (21b4488a-7c05-55c5-806d-7919dbbedbf3)
ProductServicetonic (053cb32e-efb9-50cd-92fe-ac1110fffc61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28024 vulnerable 2026-06-08 05:31:22.830404 Details available
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
Published: 2021-11-08T14:29:04.000Z
Updated: 2024-08-03T21:33:17.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28023 vulnerable 2026-06-08 05:31:22.829823 Details available
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.
Published: 2021-11-08T14:28:57.000Z
Updated: 2024-08-03T21:33:17.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28022 vulnerable 2026-06-08 05:31:22.829121 Details available
Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries.
Published: 2021-11-08T14:28:50.000Z
Updated: 2024-08-03T21:33:17.047Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.