Service Desk Express

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-4946 Jul 29, 23:27 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to inject arbitrary web script or HTML via the (1) SelTab parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Bmc Service Desk Express

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.6%

CVE-2013-4945 Jul 29, 23:27 HIGH POC This Week

Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1) ASPSESSIONIDASSRATTQ, (2) TABLE_WIDGET_1, (3). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Bmc Service Desk Express

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.4%

CVE-2013-4946

EPSS 1% CVSS 4.3

MEDIUM POC This Month

XSS Bmc Service Desk Express

NVD Exploit-DB

CVE-2013-4945

EPSS 0% CVSS 7.5

HIGH POC This Week

SQLi Bmc Service Desk Express

NVD Exploit-DB