Cerberus Helpdesk

Vendor:

First CVE: Jun 16, 2005 · Active for 21 years

Total CVEs

More Total CVEs than 88% of tracked products

3.0

Avg CVEs / Year

Higher CVE frequency than 78% of tracked products

5.3

Avg CVSS

Higher Avg CVSS than 13% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Cerberus Helpdesk over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jun 16, 2005

21 years ago

Most Recent CVE

Mar 6, 2009

6,353 days ago

CVE Severity & Scoring

Cerberus Helpdesk9 CVEs

78%

22%

All CVEs353,240 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown9 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown9 (100.0%)

User Interaction

None0 (0.0%)

Unknown9 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown9 (100.0%)

Top CVEs

Signals from CVEs in this product scope (9 CVEs).

9 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2005-4427HIGH Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $	Dec 20, 2005	7.5	29	NO	YES
CVE-2006-5428MEDIUM rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain se	Oct 20, 2006	5.0	23	NO	YES
CVE-2006-0509MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the con	Feb 1, 2006	4.3	21	NO	YES
CVE-2006-4539HIGH (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, al	Sep 5, 2006	7.5	20	NO	NO
CVE-2008-6440MEDIUM Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," poss	Mar 6, 2009	5.0	15	NO	NO
CVE-2005-3502MEDIUM attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter.	Nov 5, 2005	5.0	15	NO	NO
CVE-2005-1963MEDIUM Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which lea	Jun 16, 2005	5.0	15	NO	NO
CVE-2005-4428MEDIUM Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter.	Dec 20, 2005	4.3	14	NO	NO
CVE-2005-1962MEDIUM Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or	Jun 16, 2005	4.3	14	NO	NO

View all 9 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (9 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

3 CVEs

33.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (9 CVEs).

Media Mentions

Signals from CVEs in this product scope (9 CVEs).

Top CNAs Publishing CVEs For Cerberus Helpdesk

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
3.2.1	1	5.0	2.7%	1
3.2	1	7.5	1.8%	0
2.7.1_development_release	1	4.3	2.0%	1
2.7	1	4.3	2.0%	1
2.649	2	5.9	2.3%	1
2.6.1	1	5.0	1.6%	0
2.5	2	5.0	1.4%	0
2.4	1	5.0	1.6%	0
2.3	1	5.0	1.6%	0
2.2	1	5.0	1.6%	0
2.1	1	5.0	1.6%	0
2.0	1	5.0	1.6%	0
0.97.3	2	4.7	1.4%	0