help desk vulnerabilities and fixes

Recent CVEs affecting help desk, with upgrade or downgrade steps. 7 tracked.

Also searched as: helpdesk.

help desk has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2023-03-08. Highest priority: CVE-2021-33353 (score 65/100).

• CVE-2022-40325 MEDIUM 6.1 UPGRADE SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.
• CVE-2022-40324 MEDIUM 6.1 UPGRADE SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.
• CVE-2022-40323 MEDIUM 6.1 UPGRADE SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.
• CVE-2022-40322 MEDIUM 6.1 UPGRADE SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.
• CVE-2021-33353 CRITICAL 9.8 UPGRADE Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7
• CVE-2021-33352 CRITICAL 9.8 UPGRADE An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execu
• CVE-2021-33351 CRITICAL 9.0 UPGRADE Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.

FAQ

How do I fix help desk vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is help desk being exploited right now?

None of the tracked help desk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which help desk CVE should I patch first?

CVE-2021-33353 currently ranks highest (65/100): Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7.

RSS feed for help desk · ← Back to latest CVEs