Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

SolarWinds WebHelpDeskXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.

First published (updated )
CVE-2019-16955

SolarWinds WebHelpDeskXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.

First published (updated )
CVE-2019-16957

SolarWinds Web Help DeskXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.

First published (updated )
CVE-2019-16961

SolarWinds Web Help DeskXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.

First published (updated )
CVE-2019-16954

SolarWinds Web Help DeskXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field.

First published (updated )
CVE-2019-16960

SolarWinds Web Help DeskXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.

First published (updated )
CVE-2019-16956

SolarWinds WebHelpDeskSolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file at…

Risk 38
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.

First published (updated )
CVE-2019-16959

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203