Profelis

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Profelis records in CISA KEV

No Profelis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sambabox 2 records LOW Passbox 1 record LOW

Records

3 records

TI-2022-09209 CVE-2022-25620 · GHSA-46qf-8hcj-5668

Stored cross-site scripting (XSS) in Profelis IT Consultancy SambaBox

LOW 39

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vul…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00444 Published 2022-03-30 No fix listed CWE-80

TI-2024-06510 CVE-2024-7015 · GHSA-w4pv-qv3j-89ww

Improper Authentication in Profelis Informatics and Consulting's PassBOX

LOW 32

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00435 Published 2024-09-09 Fixed in v1.2 CWE-306

TI-2022-09208 CVE-2022-25619 · GHSA-4j7w-gj5j-f325

Authenticated command injection to RCE in Profelis IT Consultancy SambaBox

LOW 30

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00326 Published 2022-03-30 No fix listed CWE-77

Open these records in search →