PatchTheCVEservice desk manager vulnerabilities and fixes
Recent CVEs affecting service desk manager, with upgrade or downgrade steps. 5 tracked.
Also searched as: servicedeskmanager.
service desk manager has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-01-22. Highest priority: CVE-2018-19635 (score 56/100).
- CVE-2018-19635 CRITICAL 9.8 DOWNGRADE DOWNGRADE CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privi
- CVE-2018-19634 HIGH 7.5 DOWNGRADE DOWNGRADE CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey
- CVE-2016-9148 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 a
- CVE-2016-10086 HIGH 8.1 DOWNGRADE DOWNGRADE RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote au
- CVE-2013-2630 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers
FAQ
How do I fix service desk manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is service desk manager being exploited right now?
None of the tracked service desk manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which service desk manager CVE should I patch first?
CVE-2018-19635 currently ranks highest (56/100): CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privi.