HGiga

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

HGiga records in CISA KEV

No HGiga vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Ssr45 Isherlock-antispam · all components

TI-2020-15839 CVE-2020-25848 · GHSA-qf9m-hx8v-j382

MEDIUM 45

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2020-12-31 Fixed in 243, 114 +3 CWE-287

TI-2021-05709 CVE-2021-22848 · GHSA-3v2j-hfc3-mhfr

MEDIUM 44

HGiga MailSherlock contains a SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2021-03-18 Fixed in 120, 133 CWE-89

TI-2020-18199 CVE-2020-35743 · GHSA-p6jx-ww27-x6x5

LOW 34

HGiga MailSherlock contains a SQL injection flaw.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89

TI-2020-18198 CVE-2020-35742 · GHSA-xfr6-j4fr-qr42

LOW 34

HGiga MailSherlock contains a vulnerability of SQL Injection.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89

TI-2020-18197 CVE-2020-35741 · GHSA-6w7j-r535-gc2c

LOW 32

HGiga MailSherlock does not validate user parameters on multiple login pages.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79

TI-2020-18196 CVE-2020-35740 · GHSA-r2gc-8vh7-8256

LOW 32

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79