{"id":"CVE-2018-19947","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-19947","generatedAt":"2026-10-29T01:49:18.315Z","title":"The vulnerability have been reported to affect earlier versions of Helpdesk.","description":"The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.","published":"2020-09-11T15:15:11.000Z","lastModified":"2026-06-17T01:50:10.000Z","status":"Modified","sourceIdentifier":"security@qnapsecurity.com.tw","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-200","CWE-209","CWE-210"],"affected":["qnap/helpdesk"],"epss":{"score":0.00755,"percentile":0.54909,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.76%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.qnap.com/zh-tw/security-advisory/qsa-20-05","tags":["Vendor Advisory"],"source":"security@qnapsecurity.com.tw"},{"url":"https://www.qnap.com/zh-tw/security-advisory/qsa-20-05","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-19947","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}