Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
HGiga records in CISA KEVNo HGiga vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01674 · Published 2020-12-31 · Fixed in 243, 114 +3 CWE-287
Priority LOW 39
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00669 · Published 2019-06-03 · Fixed in 1.5-328, 1.5-239 +6 CWE-352
Priority LOW 39
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00669 · Published 2019-06-03 · Fixed in 1.5-328, 1.5-239 +6 CWE-352
