uvdesk vulnerabilities
7 published CVEs name uvdesk among the affected products.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105029
UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint
uvdesk · support-center-bundle
Medium5.3 - CVE-2025-71421
UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent
uvdesk · core-framework
High8.6 - CVE-2025-71420
UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply
uvdesk · core-framework
Medium5.3 - CVE-2025-71419
UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer
uvdesk · core-framework
Medium5.1 - CVE-2026-92805
UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
uvdesk · community-skeleton
Critical9.3 - CVE-2024-3137
Improper Privilege Management in uvdesk/community-skeleton
uvdesk · uvdesk/community-skeleton
High7.1 - CVE-2023-1197
Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton
uvdesk · uvdesk/community-skeleton
Medium4.3