Read the docs

HGiga

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

HGiga records in CISA KEV

No HGiga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Msr45 Isherlock-user 10 records MEDIUM Ssr45 Isherlock-user 8 records MEDIUM Msr45 Isherlock-antispam 6 records MEDIUM Ssr45 Isherlock-antispam 6 records MEDIUM Isherlock 5 records MEDIUM Oaklouds Mailsherlock 5 records LOW Oaklouds Portal 5 records MEDIUM Msr45 Isherlock-base 3 records MEDIUM

Records

5 records in Oaklouds Mailsherlock · all components

TI-2023-10341 CVE-2023-24841 · GHSA-6xj9-g6q5-f8xc

HGiga MailSherlock - Command Injection

Priority LOW 35

HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 No fix listed CWE-78
TI-2023-10340 CVE-2023-24840 · GHSA-98vq-g327-7379

HGiga MailSherlock - SQL Injection

Priority LOW 35

HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 No fix listed CWE-89
TI-2023-10342 CVE-2023-24842 · GHSA-775x-85h4-43cp

HGiga MailSherlock - Broken Access Control

Priority LOW 31

HGiga MailSherlock has vulnerability of insufficient access control.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00595 Published 2023-03-27 No fix listed CWE-639
TI-2023-10339 CVE-2023-24839 · GHSA-92cv-rhgw-5fm8

HGiga MailSherlock - Reflected XSS

Priority LOW 28

HGiga MailSherlock’s specific function has insufficient filtering for user input.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00494 Published 2023-03-27 No fix listed CWE-79
TI-2018-12500 CVE-2018-17542 · GHSA-77r5-xf97-q83j

SQL injection in HGiga MailSherlock

Priority LOW 27

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi requ…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01229 Published 2019-02-11 Fixed in 1.5.235 CWE-89
Open these records in search →