# freescout. Every CVE that names freescout among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48481.md) `CVE-2025-48481` · CVE record: freescout-help-desk freescout · CVSS 6.1 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-841 - [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48480.md) `CVE-2025-48480` · CVE record: freescout-help-desk freescout · CVSS 7.0 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841 - [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48479.md) `CVE-2025-48479` · CVE record: freescout-help-desk freescout · CVSS 8.5 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841 - [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48478.md) `CVE-2025-48478` · CVE record: freescout-help-desk freescout · CVSS 7.0 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841 - [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48477.md) `CVE-2025-48477` · CVE record: freescout-help-desk freescout · CVSS 7.1 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841 - [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48476.md) `CVE-2025-48476` · CVE record: freescout-help-desk freescout · CVSS 7.1 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841 - [FreeScout Vulnerable to Insufficient Authorization](https://agentprime.io/advisories/CVE-2025-48475.md) `CVE-2025-48475` · CVE record: freescout-help-desk freescout · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2025 · Tags: Broken access control - [FreeScout Vulnerable to Insufficient Authorization](https://agentprime.io/advisories/CVE-2025-48474.md) `CVE-2025-48474` · CVE record: freescout-help-desk freescout · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2025 · Tags: Broken access control - [FreeScout Vulnerable to Insufficient Authorization](https://agentprime.io/advisories/CVE-2025-48473.md) `CVE-2025-48473` · CVE record: freescout-help-desk freescout · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2025 · Tags: Broken access control - [FreeScout Vulnerable to Insufficient Authorization](https://agentprime.io/advisories/CVE-2025-48472.md) `CVE-2025-48472` · CVE record: freescout-help-desk freescout · CVSS 6.9 Medium · Not analysed yet · Published 29 May 2025 · Tags: Broken access control - [FreeScout Vulnerable to Arbitrary File Upload](https://agentprime.io/advisories/CVE-2025-48471.md) `CVE-2025-48471` · CVE record: freescout-help-desk freescout · CVSS 7.0 High · Not analysed yet · Published 29 May 2025 · Tags: Unrestricted file upload - [FreeScout Vulnerable to Remote Code Execution (RCE)](https://agentprime.io/advisories/CVE-2025-48390.md) `CVE-2025-48390` · CVE record: freescout-help-desk freescout · CVSS 8.6 High · Not analysed yet · Published 29 May 2025 · Tags: Code injection - [FreeScout Vulnerable to Deserialization of Untrusted Data](https://agentprime.io/advisories/CVE-2025-48389.md) `CVE-2025-48389` · CVE record: freescout-help-desk freescout · CVSS 8.6 High · Not analysed yet · Published 29 May 2025 · Tags: Insecure deserialization - [FreeScout Has Insufficient Protection Against CRLF-injection](https://agentprime.io/advisories/CVE-2025-48388.md) `CVE-2025-48388` · CVE record: freescout-help-desk freescout · CVSS 7.0 High · Not analysed yet · Published 29 May 2025 · Tags: Other injection, Memory corruption - [Prototype Pollution in getQueryParam Function (URL Query Parser)](https://agentprime.io/advisories/CVE-2024-34698.md) `CVE-2024-34698` · CVE record: freescout-helpdesk freescout · CVSS 4.6 Medium · Not analysed yet · Published 13 May 2024 · Tags: Prototype pollution - [Freescout vulnerable to Stored HTML Injection in Editing Received Emails](https://agentprime.io/advisories/CVE-2024-34697.md) `CVE-2024-34697` · CVE record: freescout-helpdesk freescout · CVSS 7.6 High · Not analysed yet · Published 13 May 2024 · Tags: Other injection - [FreeScout OS Command Injection vulnerability](https://agentprime.io/advisories/CVE-2024-29185.md) `CVE-2024-29185` · CVE record: freescout-helpdesk freescout · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Mar 2024 · Tags: Command injection - [FreeScout Stored XSS to Privilege Escalation After CSP Bypass](https://agentprime.io/advisories/CVE-2024-29184.md) `CVE-2024-29184` · CVE record: freescout-helpdesk freescout · CVSS 8.0 High · Not analysed yet · Published 22 Mar 2024 · Tags: Cross-site scripting (XSS) - [SMTP Mail Credentials Disclosed in Error Log in freescout](https://agentprime.io/advisories/CVE-2024-28186.md) `CVE-2024-28186` · CVE record: freescout-helpdesk freescout · CVSS 7.1 High · Not analysed yet · Published 12 Mar 2024 · Tags: Information disclosure Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .