HGiga

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

HGiga records in CISA KEV

No HGiga vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Oaklouds Portal · all components

TI-2023-11163 CVE-2023-25909 · GHSA-5wfp-vx7w-jx9r

MEDIUM 51

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00942 Published 2023-03-27 No fix listed CWE-434

TI-2021-15673 CVE-2021-37913 · GHSA-r586-r9hc-jwq2

MEDIUM 47

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02832 Published 2021-09-15 No fix listed CWE-78

TI-2021-15672 CVE-2021-37912 · GHSA-9wv9-vhvp-xjxr

MEDIUM 47

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02832 Published 2021-09-15 No fix listed CWE-78

TI-2021-05711 CVE-2021-22850 · GHSA-rc3j-2886-4xqj

MEDIUM 44

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01002 Published 2021-01-19 No fix listed CWE-732

TI-2022-17825 CVE-2022-38118 · GHSA-vp2j-mcvq-w3mr

MEDIUM 41

OAKlouds Portal website’s Meeting Room has insufficient validation for user input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01708 Published 2022-08-30 No fix listed CWE-89