Landesk develops a focused suite of systems-management and endpoint-security products that operate as privileged administrative tools across enterprise infrastructure, including the Management Suite, Security Suite, and Server Manager. Its vulnerability profile reflects the exposure surface inherent to web-facing management consoles and remote-access platforms: recurrent weaknesses center on input validation, path traversal, cross-site request forgery, and cross-site scripting, alongside buffer-boundary issues that can arise in native management components. Defenders should treat Landesk administrative interfaces as high-value targets requiring strict access controls and prioritize patching, especially for internet-exposed management gateways; current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Landesk over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-1674HIGH Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535 | Apr 18, 2007 | 10.0 | 82 | NO | YES |
CVE-2012-1195HIGH Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows | Feb 18, 2012 | 7.5 | 76 | NO | YES |
CVE-2012-1196MEDIUM Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary | Feb 18, 2012 | 5.0 | 65 | NO | YES |
CVE-2010-2892HIGH gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to execute arbitrary commands via shell metach | Nov 15, 2010 | 8.5 | 39 | NO | YES |
CVE-2008-6195HIGH Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via | Feb 20, 2009 | 7.8 | 29 | NO | YES |
CVE-2008-2468HIGH Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to exec | Sep 18, 2008 | 10.0 | 28 | NO | NO |
CVE-2014-5362HIGH The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the | Sep 19, 2017 | 7.2 | 25 | NO | NO |
CVE-2014-5361MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for req | Apr 21, 2015 | 6.8 | 23 | NO | NO |
CVE-2014-5360MEDIUM Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AM | Feb 3, 2015 | 4.3 | 19 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Landesk.
Media articles that mention a CVE ID that affects a product developed by Landesk — matched by CVE ID, not by vendor name.