Zendesk

    Dashboard / Vendors

    Products: 6
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    0
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-49193

    Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the support e-mail addresses associated with individual tickets are predictable.

    Last Modified: Apr 15, 2026
    Published: Oct 12, 2024

    CVE-2024-42363

    GHSL-2023-136_Samson

    Last Modified: Apr 15, 2026
    Published: Aug 20, 2024

    CVE-2021-36750

    ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).

    Last Modified: Nov 21, 2024
    Published: Dec 22, 2021

    CVE-2018-20857

    Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with [email protected] followed by <!---->. and then the attacker's domain name.

    Last Modified: Nov 21, 2024
    Published: Jul 26, 2019

    CVE-2015-6921

    Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web script or HTML via unspecified vectors.

    Last Modified: Apr 12, 2025
    Published: Sep 11, 2015
    Items Per Page
    Zendesk Vulnerabilities & Security CVEs | CVE-DB