Read the docs

Profelis

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Profelis records in CISA KEV

No Profelis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sambabox 2 records LOW Passbox 1 record LOW

Records

2 records in Sambabox · all components

TI-2022-09209 CVE-2022-25620 · GHSA-46qf-8hcj-5668

Stored cross-site scripting (XSS) in Profelis IT Consultancy SambaBox

Priority LOW 39

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vul…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00444 Published 2022-03-30 No fix listed CWE-80
TI-2022-09208 CVE-2022-25619 · GHSA-4j7w-gj5j-f325

Authenticated command injection to RCE in Profelis IT Consultancy SambaBox

Priority LOW 30

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00326 Published 2022-03-30 No fix listed CWE-77
Open these records in search →