Read the docs

HGiga

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

HGiga records in CISA KEV

No HGiga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Msr45 Isherlock-user 10 records MEDIUM Ssr45 Isherlock-user 8 records MEDIUM Msr45 Isherlock-antispam 6 records MEDIUM Ssr45 Isherlock-antispam 6 records MEDIUM Isherlock 5 records MEDIUM Oaklouds Mailsherlock 5 records LOW Oaklouds Portal 5 records MEDIUM Msr45 Isherlock-base 3 records MEDIUM

Records

10 records in Msr45 Isherlock-user · all components

TI-2020-18295 CVE-2020-35851 · GHSA-f62f-7p64-pmrv

HGiga MailSherlock - Command Injection

Priority MEDIUM 46

HGiga MailSherlock does not validate specific parameters properly.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01759 Published 2020-12-31 Fixed in 115 CWE-78
TI-2020-15839 CVE-2020-25848 · GHSA-qf9m-hx8v-j382

HGiga MailSherlock - Broken Authentication

Priority MEDIUM 45

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2020-12-31 Fixed in 243, 114 +3 CWE-287
TI-2021-05709 CVE-2021-22848 · GHSA-3v2j-hfc3-mhfr

HGiga MailSherlock - SQL Injection-2

Priority MEDIUM 44

HGiga MailSherlock contains a SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2021-03-18 Fixed in 120, 133 CWE-89
TI-2020-15841 CVE-2020-25850 · GHSA-wv77-666p-gm5q

HGiga MailSherlock - Arbitrary File Download

Priority LOW 37

The function, view the source code, of HGiga MailSherlock does not validate specific characters.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01121 Published 2020-12-31 Fixed in 117
TI-2020-18199 CVE-2020-35743 · GHSA-p6jx-ww27-x6x5

HGiga MailSherlock - SQL Injection -3

Priority LOW 34

HGiga MailSherlock contains a SQL injection flaw.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89
TI-2020-18198 CVE-2020-35742 · GHSA-xfr6-j4fr-qr42

HGiga MailSherlock - SQL Injection -1

Priority LOW 34

HGiga MailSherlock contains a vulnerability of SQL Injection.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89
TI-2020-18197 CVE-2020-35741 · GHSA-6w7j-r535-gc2c

HGiga MailSherlock - XSS -2

Priority LOW 32

HGiga MailSherlock does not validate user parameters on multiple login pages.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79
TI-2020-18196 CVE-2020-35740 · GHSA-r2gc-8vh7-8256

HGiga MailSherlock - XSS -1

Priority LOW 32

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79
Open these records in search →