Ca Service Desk Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Ca Service Desk Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-19635 — CVSS 9.8 (critical): CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.
• CVE-2016-10086 — CVSS 8.1 (high): RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or…
• CVE-2018-19634 — CVSS 7.5 (high): CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.
• CVE-2016-9148 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to…