Vulnerabilities (CVE)

Filtered by vendor Linuxserver Subscribe
Filtered by product Heimdall Application Dashboard
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-54597 1 Linuxserver 1 Heimdall Application Dashboard 2025-08-07 N/A 7.2 HIGH
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
CVE-2022-47968 1 Linuxserver 1 Heimdall Application Dashboard 2025-04-11 N/A 5.4 MEDIUM
Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page.