TI-2022-07043 CVE-2022-22794 · GHSA-99mx-crvj-r8jm
SQL injection in Cybonet Pineapp Mail Relay
Priority MEDIUM 44
Cybonet - PineApp Mail Relay Unauthenticated Sql Injection.
Cybonet
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Cybonet records in CISA KEVNo Cybonet vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2024-27755 CVE-2024-41695 · GHSA-w2vp-cxx6-662p
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Priority MEDIUM 40
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
TI-2021-14857 CVE-2021-36719 · GHSA-hvhx-qhmq-cpjp
Unrestricted file upload in Cybonet PineApp - Mail Secure
Priority MEDIUM 40
PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system.
TI-2022-07042 CVE-2022-22793 · GHSA-45rx-p9fm-3wgm
Cybonet - PineApp Mail Relay Local File Inclusion
Priority LOW 34
Cybonet - PineApp Mail Relay Local File Inclusion.
TI-2024-27754 CVE-2024-41694 · GHSA-hh8j-5g95-873c
Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Priority LOW 30
Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
TI-2021-14858 CVE-2021-36720 · GHSA-6qmc-gxp3-22f6
Cross-site scripting in Cybonet PineApp - Mail Secure
Priority LOW 28
PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .
TI-2023-14893 CVE-2023-31183 · GHSA-586m-pf8f-j4c2
Cybonet PineApp Mail Secure RXSS vulnerability
Priority LOW 27
Cybonet PineApp Mail Secure A reflected cross-site scripting (XSS) vulnerability was identified in the product, using an unspecified endpoint.