Read the docs

HGiga

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

HGiga records in CISA KEV

No HGiga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Msr45 Isherlock-user 10 records MEDIUM Ssr45 Isherlock-user 8 records MEDIUM Msr45 Isherlock-antispam 6 records MEDIUM Ssr45 Isherlock-antispam 6 records MEDIUM Isherlock 5 records MEDIUM Oaklouds Mailsherlock 5 records LOW Oaklouds Portal 5 records MEDIUM Msr45 Isherlock-base 3 records MEDIUM

Records

5 records in Isherlock · all components

TI-2023-18922 CVE-2023-37292 · GHSA-h962-83vh-m65j

HGiga iSherlock - Command Injection

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Inj…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01318 Published 2023-07-21 Fixed in iSherlock-user-4.5-174, iSherlock-user-5.5-174 CWE-78
TI-2024-04002 CVE-2024-4299 · GHSA-wgx8-xhfh-5ph4

HGiga iSherlock - Command Injection

Priority LOW 38

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 147 CWE-78
TI-2024-04001 CVE-2024-4298 · GHSA-8mvv-2pq8-4996

HGiga iSherlock - Command Injection

Priority LOW 38

The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileg…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 188 CWE-78
TI-2024-03999 CVE-2024-4296 · GHSA-4mp7-6gp5-x248

HGiga iSherlock - Arbitrary File Download

Priority LOW 26

The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative p…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 149 CWE-22
TI-2024-04000 CVE-2024-4297 · GHSA-29q2-fp4w-f7hm

HGiga iSherlock - Arbitrary File Download

Priority LOW 24

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 147 CWE-22
Open these records in search →