Read the docs

Cellopoint

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Cellopoint records in CISA KEV

No Cellopoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cellos 3 records LOW Secure Email Gateway 2 records MEDIUM

Records

3 records in Cellos · all components

TI-2020-13151 CVE-2020-17385 · GHSA-g45j-3ccj-357x

Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure

Priority LOW 36

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01602 Published 2020-08-25 No fix listed CWE-22
TI-2020-13150 CVE-2020-17384 · GHSA-j57q-8f2v-q7xh

Cellopoint CelloOS - Remote Command Execution (RCE)

Priority LOW 35

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01927 Published 2020-08-25 No fix listed CWE-78
Open these records in search →