Read the docs

Hammock Corporation

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Hammock Corporation records in CISA KEV

No Hammock Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Assetview 3 records MEDIUM

Records

7 records

TI-2022-11361 CVE-2022-28719 · GHSA-jw2m-w7c2-h66c

Missing authentication in Hammock Corporation AssetView

Priority MEDIUM 50

Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managin…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04677 Published 2022-04-28 No fix listed CWE-306
TI-2025-18729 CVE-2025-25060 · GHSA-rh42-r2fh-w434

Missing authentication in Hammock Corporation AssetView

Priority MEDIUM 42

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD.

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.00522 Published 2025-04-02 No fix listed CWE-306
TI-2026-71598 CVE-2026-101020 · GHSA-vqwh-j4hj-53p9

Hammock AssetView flaw lets local users gain SYSTEM privileges

Priority LOW 38

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00104 Published 2026-10-13 Fixed in Ver 13.2.7B, Ver 13.2.7B (13.2 series) +2 CWE-732
TI-2017-01530 CVE-2017-2240 · GHSA-mphx-8gxr-8rp6

Path traversal in Hammock Corporation AssetView for MacOS

Priority LOW 32

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01618 Published 2017-07-14 No fix listed CWE-22
TI-2024-30539 CVE-2024-45504 · GHSA-v6vm-xfhq-54qp

Cross-site request forgery in Alps System Integration Co., Ltd. InterSafe WebFilter

Priority LOW 29

Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00318 Published 2024-09-10 No fix listed CWE-352
TI-2017-01531 CVE-2017-2241 · GHSA-25j4-vfxf-h9xv

SQL injection in Hammock Corporation AssetView for MacOS

Priority LOW 29

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00731 Published 2017-07-14 No fix listed CWE-89
Open these records in search →