CVE Intelligence

Desktopalert vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Desktopalert products: 15 record(s), with severity, exploitation and fixes.

Pingalert Application Server 15

Exploited only (KEV) →

CVE-2025-54563 High · 7.5 CWE-284 Nov 24, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure.
CVE-2025-54347 Critical · 9.9 CWE-22 Nov 24, 2025
Path Traversal in Desktopalert Pingalert Application Server
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions.
CVE-2025-54341 Medium · 5.3 CWE-798 Nov 24, 2025
Use of Hard-coded Credentials in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values.
CVE-2025-54338 High · 7.5 CWE-284 Nov 24, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes.
CVE-2025-54562 Medium · 4.3 CWE-209 Nov 14, 2025
Information Exposure Through an Error Message in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Technical Information to be Disclosed through stack trace.
CVE-2025-54561 Medium · 4.3 CWE-284 Nov 14, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema.
CVE-2025-54560 Low · 3.8 CWE-918 Nov 14, 2025
Server-Side Request Forgery (SSRF) in Desktopalert Pingalert Application Server
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure.
CVE-2025-54559 Low · 3.7 CWE-22 Nov 14, 2025
Path Traversal in Desktopalert Pingalert Application Server
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content.
CVE-2025-54348 Medium · 6.5 CWE-80 Nov 14, 2025
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of…
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.
CVE-2025-54346 High · 7.6 CWE-80 Nov 14, 2025
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server…
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.
CVE-2025-54345 High · 7.5 CWE-200 Nov 14, 2025
Exposure of Sensitive Information in Desktopalert Pingalert Application Server
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor.
CVE-2025-54343 Critical · 9.6 CWE-284 Nov 14, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
CVE-2025-54342 Low · 3.3 CWE-312 Nov 14, 2025
Cleartext Storage of Sensitive Information in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies.
CVE-2025-54340 Medium · 4.1 CWE-327 Nov 14, 2025
Use of a Broken or Risky Cryptographic Algorithm in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm.
CVE-2025-54339 Critical · 10.0 CWE-284 Nov 14, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.