Vendors / Ozeki Ltd. Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 8
Exploited now Ozeki Ltd. records in CISA KEV No Ozeki Ltd. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that is mishandled in a CSV export.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01732 · Published 2020-09-22 · No fix listed CWE-1236
Priority MEDIUM 42
Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01842 · Published 2020-09-22 · No fix listed CWE-434
Priority LOW 39
Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00535 · Published 2020-09-22 · No fix listed CWE-352
Priority LOW 36
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01384 · Published 2020-09-18 · No fix listed CWE-611
Priority LOW 35
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0159 · Published 2020-09-22 · No fix listed
Priority LOW 35
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01836 · Published 2020-09-29 · No fix listed CWE-502
Priority LOW 35
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01864 · Published 2020-09-22 · No fix listed CWE-22
Priority LOW 28
Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient field in the Mailbox feature, (2) OZFORM_GROUPNAME field in the Group configura…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00719 · Published 2020-09-22 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
CVSS 3.1 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00843 · Published 2020-09-22 · No fix listed CWE-88
Priority LOW 25
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01145 · Published 2020-09-18 · No fix listed
Priority LOW 24
Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00979 · Published 2020-09-22 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
0 8 4 1 0
THREATIST.IORead the docs