Simplehelp
Approved changes feed: RSS · Atom
cpe:2.3:a:simple-help:simplehelp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Simple Help (4b2480b7-ca77-5642-b0cd-9c8e960b5732) |
|---|---|
| Product | Simplehelp (d11e6c44-b3cf-5691-b047-93f5b4a3f15e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36728 |
vulnerable | 2026-06-08 07:21:02.133370 |
SimpleHelp Cross Site Request Forgery
MEDIUM (6.3)
Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.
Published: 2025-07-25T16:42:03.612Z
Updated: 2025-07-25T17:19:15.996Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36727 |
vulnerable | 2026-06-08 07:21:02.132881 |
SimpleHelp Inclusion of functionality from untrusted control sphere
HIGH (8.3)
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.
Published: 2025-07-25T16:37:51.633Z
Updated: 2025-07-25T17:24:23.662Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57728 |
vulnerable | 2026-06-08 06:56:13.728657 |
Details available
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
Published: 2025-01-15T00:00:00.000Z
Updated: 2026-08-04T03:56:06.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57727 |
vulnerable | 2026-06-08 06:56:13.728235 |
Details available
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
Published: 2025-01-15T00:00:00.000Z
Updated: 2026-08-04T03:55:43.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57726 |
vulnerable | 2026-06-08 06:56:13.727636 |
Details available
SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
Published: 2025-01-15T00:00:00.000Z
Updated: 2026-08-04T03:56:05.499Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.