The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could…

Description

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Scores

EPSS (exploitation in 30 days)

0.76% · top 45% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

• CWE-200 Information Exposure (opens in a new tab)All about CWE-200 and its CVEs
• CWE-209 Information Exposure Through an Error Message (opens in a new tab)All about CWE-209 and its CVEs
• CWE-210 Information Exposure Through Self-generated Error Message (opens in a new tab)All about CWE-210 and its CVEs

Affected products

• QNAP Systems Inc. · Helpdesk

  • affected unspecified – < 3.0.3

References (1)

• https://www.qnap.com/zh-tw/security-advisory/qsa-20-05 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-19947](https://trackcve.app/badge/CVE-2018-19947.svg)](https://trackcve.app/cve/CVE-2018-19947)

Record last updated 5 Aug 2024, 11:51 UTC.