Searching vulnerabilities affecting “zendesk”
3 vulnerabilities found for “zendesk”
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).
The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.