Known Vulnerabilities for Control Desk by Ibm
Listed below are 10 of the newest known vulnerabilities associated with "Control Desk" by "Ibm".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48887 json | Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2022-22330 json | IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOn... | 5.3 - MEDIUM | 2022-09-13 | 2023-08-08 |
| CVE-2022-22329 json | IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to... | 4.3 - MEDIUM | 2022-09-13 | 2022-09-16 |
| CVE-2021-20559 json | IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... | 5.4 - MEDIUM | 2021-05-10 | 2021-05-14 |
| CVE-2020-4409 json | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing att... | 8.2 - HIGH | 2020-09-16 | 2020-09-28 |
| CVE-2019-4749 json | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... | 5.4 - MEDIUM | 2020-04-17 | 2020-04-21 |
| CVE-2019-4644 json | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... | 6.1 - MEDIUM | 2020-04-17 | 2020-04-21 |
| CVE-2019-4512 json | IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in furt... | 4.3 - MEDIUM | 2019-10-09 | 2019-10-09 |
| CVE-2019-4446 json | IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying req... | 5.4 - MEDIUM | 2020-04-17 | 2021-07-21 |
| CVE-2019-4429 json | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... | 5.4 - MEDIUM | 2020-02-19 | 2020-04-30 |