Halo Service Solutions

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Halo Service Solutions records in CISA KEV

No Halo Service Solutions vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2024-05751 CVE-2024-6202 · GHSA-2jwq-w78h-4r89

MEDIUM 49

HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2024-08-06 Fixed in 2.146.1 CWE-863

TI-2024-05752 CVE-2024-6203 · GHSA-q664-v9r4-qmrg

LOW 38

HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00389 Published 2024-08-06 Fixed in 2.146.1 CWE-640

TI-2024-05749 CVE-2024-6200 · GHSA-59j7-j82m-4gmq

LOW 37

HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00355 Published 2024-08-06 Fixed in 2.146.1 CWE-79

TI-2024-05750 CVE-2024-6201 · GHSA-53fg-j4pj-j8mf

LOW 30

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00309 Published 2024-08-06 Fixed in 2.146.1