Known Vulnerabilities for products from Lansweeper

Listed below are 18 of the newest known vulnerabilities associated with the vendor "Lansweeper".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-39031 json Not Provided 2026-06-26 2026-06-29
CVE-2022-32763 json A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lanswee... 6.1 - MEDIUM 2022-12-15 2022-12-19
CVE-2022-32573 json A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A... 8.8 - HIGH 2022-12-15 2022-12-19
CVE-2022-29517 json A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10... 8.8 - HIGH 2022-12-15 2022-12-19
CVE-2022-29511 json A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper la... 6.5 - MEDIUM 2022-12-15 2022-12-19
CVE-2022-28703 json A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper... 5.4 - MEDIUM 2022-12-15 2022-12-19
CVE-2022-27498 json A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweepe... 6.5 - MEDIUM 2022-12-15 2022-12-19
CVE-2022-22149 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.8 - HIGH 2022-04-14 2022-04-21
CVE-2022-21234 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.8 - HIGH 2022-04-14 2022-04-21
CVE-2022-21210 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.8 - HIGH 2022-04-14 2022-04-21
CVE-2022-21145 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 4.8 - MEDIUM 2022-04-14 2022-04-21
CVE-2020-14011 json Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, un... 9.8 - CRITICAL 2020-06-15 2022-04-26
CVE-2020-13658 json In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elev... 8 - HIGH 2020-09-30 2020-10-15
CVE-2019-18955 json The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within c... 6.1 - MEDIUM 2019-12-19 2019-12-27
CVE-2019-13462 json Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. 9.1 - CRITICAL 2019-08-12 2019-08-15
CVE-2017-16841 json LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx. Not Provided 2017-11-16 2025-04-20
CVE-2017-13706 json XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0... 9.9 - CRITICAL 2017-10-10 2017-11-05
CVE-2017-9292 json Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782. Not Provided 2017-05-29 2025-04-20
CVE-2015-9264 json Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via ... 9.8 - CRITICAL 2018-08-27 2018-11-07

Known software with vulnerabilities from Lansweeper

Type Vendor Product Version
ApplicationLansweeperLansweeper3.5

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report