Vulnerabilities (CVE)

Filtered by vendor Servicetonic Subscribe
Filtered by product Servicetonic
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28024 1 Servicetonic 1 Servicetonic 2022-07-12 7.5 HIGH 9.8 CRITICAL
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
CVE-2021-28023 1 Servicetonic 1 Servicetonic 2021-11-09 7.5 HIGH 9.8 CRITICAL
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.