Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Lansweeper

18 known vulnerabilities

6
CRITICAL
4
HIGH
8
MEDIUM

Top Products

lansweeper 18
18 CVEs
6.1
CVE-2022-32763

A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper la

9.9
CVE-2022-32573

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1

9.9
CVE-2022-29517

A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweep

6.5
CVE-2022-29511

A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweep

5.4
CVE-2022-28703

A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansw

6.5
CVE-2022-27498

A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lans

8.8
CVE-2022-22149

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A

8.8
CVE-2022-21234

An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A speciall

8.8
CVE-2022-21210

An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specia

4.8
CVE-2022-21145

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1

8.0
CVE-2020-13658

In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to

9.8
CVE-2020-14011

Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin accoun

6.1
CVE-2019-18955

The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed wit

9.1
CVE-2019-13462

Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.

9.8
CVE-2015-9264

Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation

6.1
CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.

9.9
CVE-2017-13706

XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper befor

6.1
CVE-2017-9292

Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.

Frequently Asked Questions

How many CVEs affect Lansweeper?

Lansweeper has 18 CVE records in our database, including 6 critical and 4 high severity vulnerabilities.

What are the most severe Lansweeper vulnerabilities?

Lansweeper has 6 critical severity (CVSS 9.0+) and 4 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Lansweeper vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Lansweeper products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Lansweeper Vulnerabilities

CyberStrike scans your infrastructure for Lansweeper vulnerabilities and provides real-time remediation guidance.

Get Started