Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2024-58343

Unauthorized Reading of User Profiles via Modified Cookie in Vision Helpdesk

Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Vision
Products
Helpdesk