Read the docs

HandySoft

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

HandySoft records in CISA KEV

No HandySoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Groupware 2 records MEDIUM Hshell 1 record MEDIUM Hslogin2.dll 1 record LOW

Records

2 records in Groupware · all components

TI-2021-08348 CVE-2021-26630 · GHSA-cqff-mxpr-46m2

HANDY Groupware file download and execute vulnerability

Priority MEDIUM 44

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00813 Published 2022-05-19 No fix listed CWE-20
TI-2020-06318 CVE-2020-7804 · GHSA-ww69-xxhg-pc55

OS command injection in HandySoft Groupware for for Windows 7, 8, 10

Priority LOW 34

ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00966 Published 2020-04-29 No fix listed CWE-78
Open these records in search →