Approved changes feed: RSS · Atom

cpe:2.3:a:lansweeper:lansweeper:9.1.20.2:*:*:*:*:*:*:*

part: a version: 9.1.20.2 update: *

VendorLansweeper (7acd8654-2fe6-5bf7-a73d-e5ec1535ec58)
ProductLansweeper (7a6ae809-b46a-5bec-a2b3-d7d9da35f8f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22149 vulnerable 2026-06-08 05:40:06.049714 Details available
CRITICAL (9.1)
A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2022-04-14T19:56:40.252Z
Updated: 2025-04-15T19:05:36.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21234 vulnerable 2026-06-08 05:40:00.725305 Details available
CRITICAL (9.1)
An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2022-04-14T19:56:38.657Z
Updated: 2025-04-15T19:05:43.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21210 vulnerable 2026-06-08 05:40:00.427977 Details available
MEDIUM (6.6)
An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2022-04-14T19:56:37.148Z
Updated: 2025-04-15T19:05:50.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21145 vulnerable 2026-06-08 05:39:59.001162 Details available
CRITICAL (9.1)
A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2022-04-14T19:56:34.061Z
Updated: 2025-04-15T19:06:04.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.