PatchTheCVEzucchetti vulnerabilities
Recent CVEs affecting zucchetti products. 16 tracked.
zucchetti has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2025-11-04. Highest priority: CVE-2023-42232 (score 47/100).
- CVE-2025-61431 MEDIUM 6.1 UPGRADE UPGRADE A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMa
- CVE-2025-52180 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenti
- CVE-2024-51322 MEDIUM 5.4 DOWNGRADE Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achiev
- CVE-2024-51321 HIGH 7.6 DOWNGRADE In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the
- CVE-2024-51320 MEDIUM 5.4 DOWNGRADE Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achiev
- CVE-2024-51319 HIGH 7.3 DOWNGRADE A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authentic
- CVE-2023-42234 MEDIUM 5.4 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the
- CVE-2023-42233 MEDIUM 6.1 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/
- CVE-2023-42232 HIGH 7.5 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Inde
- CVE-2023-42231 HIGH 8.1 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control
- CVE-2023-42230 MEDIUM 6.1 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView
- CVE-2023-42229 MEDIUM 6.5 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal
- CVE-2023-42228 HIGH 8.8 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control
- CVE-2023-42227 HIGH 7.5 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save f
- CVE-2023-42226 HIGH 7.5 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachme
- CVE-2023-42225 HIGH 7.5 UPGRADE Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/Dow
FAQ
How do I fix zucchetti vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zucchetti being exploited right now?
None of the tracked zucchetti CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zucchetti CVE should I patch first?
CVE-2023-42232 currently ranks highest (47/100): Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Inde.