Known Vulnerabilities for Control Desk by Ibm
Listed below are 10 of the newest known vulnerabilities associated with "Control Desk" by "Ibm".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-39698 json | Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting ... | Not Provided | 2026-04-08 | 2026-04-29 |
| CVE-2026-32535 json | Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting In... | Not Provided | 2026-03-25 | 2026-04-29 |
| CVE-2025-30901 json | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Joom... | Not Provided | 2025-04-01 | 2026-04-23 |
| CVE-2025-30880 json | Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access... | Not Provided | 2025-04-01 | 2026-04-23 |
| CVE-2022-46840 json | Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorr... | Not Provided | 2024-12-13 | 2026-04-28 |
| CVE-2022-46838 json | Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorr... | Not Provided | 2024-12-13 | 2026-04-28 |
| CVE-2022-22330 json | IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOn... | 5.3 - MEDIUM | 2022-09-13 | 2023-08-08 |
| CVE-2022-22329 json | IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to... | 4.3 - MEDIUM | 2022-09-13 | 2022-09-16 |
| CVE-2021-20559 json | IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... | 5.4 - MEDIUM | 2021-05-10 | 2021-05-14 |
| CVE-2020-4409 json | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing att... | 8.2 - HIGH | 2020-09-16 | 2020-09-28 |