Read the docs

North Grid

Records3All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

North Grid records in CISA KEV
TI-2023-24508 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability Priority CRITICAL 90KEV 2024-12-03

Components

Products in the NVD configurations · select one to filter the records
Proself 3 records CRITICAL

Records

3 records in Proself · all components

TI-2023-24508 CVE-2023-45727 · GHSA-m745-jcvj-8cx6

XML external entity injection in North Grid Proself Enterprise/Standard Edition

Priority CRITICAL 90KEV

Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04822 Published 2023-10-18 No fix listed CWE-611
TI-2023-20554 CVE-2023-39415 · GHSA-4g7j-qx49-cxcp

Improper authentication in North Grid Proself Enterprise/Standard Edition

Priority MEDIUM 41

Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01034 Published 2023-08-18 No fix listed CWE-287
TI-2023-20555 CVE-2023-39416 · GHSA-cjv9-j3cm-36wm

OS command injection in North Grid Proself Enterprise/Standard Edition

Priority LOW 36

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative pri…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01201 Published 2023-08-18 No fix listed CWE-78
Open these records in search →