Vendors / Hillstonenet Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Hillstonenet records in CISA KEV No Hillstonenet vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00614 · Published 2023-11-04 · No fix listed CWE-79
Priority MEDIUM 50
https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect Access Control.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00779 · Published 2022-12-27 · No fix listed CWE-284
Priority MEDIUM 45
Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01137 · Published 2024-08-26 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
2 0 1 0 0
