TI-2023-06694 CVE-2023-7327 · GHSA-5r7g-25f3-63r9
Ozeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read
Priority MEDIUM 42
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability.
Ozeki Ltd.
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Ozeki Ltd. records in CISA KEVNo Ozeki Ltd. vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2020-10990 CVE-2020-14026 · GHSA-9rcr-qh8q-m9m6
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of…
Priority MEDIUM 42
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that is mishandled in a CSV export.
TI-2020-10986 CVE-2020-14022 · GHSA-9q88-264f-9cgp
Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk…
Priority MEDIUM 42
Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file.
TI-2020-10989 CVE-2020-14025 · GHSA-55qc-4wg3-f2p8
Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.
Priority LOW 39
Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.
TI-2020-10993 CVE-2020-14029 · GHSA-j5rv-8887-pg3h
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Priority LOW 36
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
TI-2020-10995 CVE-2020-14031 · GHSA-3p6f-5r42-cg3p
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Priority LOW 35
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
TI-2020-10994 CVE-2020-14030 · GHSA-xfxx-vmw5-vf7w
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Priority LOW 35
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
TI-2020-10992 CVE-2020-14028 · GHSA-rpvq-7m68-cp2r
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Priority LOW 35
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
TI-2020-10988 CVE-2020-14024 · GHSA-67pm-3c62-w89c
Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected…
Priority LOW 28
Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient field in the Mailbox feature, (2) OZFORM_GROUPNAME field in the Group configura…
TI-2020-10991 CVE-2020-14027 · GHSA-53ph-mcf9-r8mc
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Priority LOW 26
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
TI-2020-10985 CVE-2020-14021 · GHSA-4p72-53xh-hr8g
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Priority LOW 25
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
TI-2020-10987 CVE-2020-14023 · GHSA-9fc4-hf3h-f527
Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.
Priority LOW 24
Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.
TI-2006-06418 CVE-2006-6674 · GHSA-prj4-jm4c-9fqw
Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in…
Priority LOW 11
Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVersion\Plugins\httpsmsgate registry key, which allows local users to obtain sensi…