Vulnerabilities > Topdesk > Topdesk > 6.09.015

DATE CVE VULNERABILITY TITLE RISK
2018-07-11 CVE-2018-10232 Cross-Site Request Forgery (CSRF) vulnerability in Topdesk 5.7/8.05.001/8.05.016
Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors.
network
topdesk CWE-352
4.3
2018-07-11 CVE-2018-10231 Cross-site Scripting vulnerability in Topdesk
Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
network
topdesk CWE-79
4.3
2017-07-04 CVE-2017-7276 Cross-site Scripting vulnerability in Topdesk
There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
network
topdesk CWE-79
4.3