https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-32763.htmlhttps://patchthecve.com/cve/CVE-2022-32763.htmlWed, 17 Jun 2026 04:47:52 +0000MEDIUM 6.1: A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-32573.htmlhttps://patchthecve.com/cve/CVE-2022-32573.htmlWed, 17 Jun 2026 04:47:34 +0000CRITICAL 9.9: A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-29517.htmlhttps://patchthecve.com/cve/CVE-2022-29517.htmlWed, 17 Jun 2026 04:40:21 +0000CRITICAL 9.9: A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-29511.htmlhttps://patchthecve.com/cve/CVE-2022-29511.htmlWed, 17 Jun 2026 04:40:20 +0000MEDIUM 6.5: A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-28703.htmlhttps://patchthecve.com/cve/CVE-2022-28703.htmlWed, 17 Jun 2026 04:38:53 +0000MEDIUM 5.4: A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-27498.htmlhttps://patchthecve.com/cve/CVE-2022-27498.htmlWed, 17 Jun 2026 04:37:07 +0000MEDIUM 6.5: A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-22149.htmlhttps://patchthecve.com/cve/CVE-2022-22149.htmlWed, 17 Jun 2026 04:27:50 +0000HIGH 8.8: A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-21234.htmlhttps://patchthecve.com/cve/CVE-2022-21234.htmlWed, 17 Jun 2026 04:25:49 +0000HIGH 8.8: An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-21210.htmlhttps://patchthecve.com/cve/CVE-2022-21210.htmlWed, 17 Jun 2026 04:25:45 +0000HIGH 8.8: An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-21145.htmlhttps://patchthecve.com/cve/CVE-2022-21145.htmlWed, 17 Jun 2026 04:25:36 +0000MEDIUM 4.8: A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2020-13658.htmlhttps://patchthecve.com/cve/CVE-2020-13658.htmlWed, 17 Jun 2026 02:53:31 +0000HIGH 8.0: In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges within the application.