Sematell

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sematell records in CISA KEV

No Sematell vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Replyone · all components

TI-2024-32602 CVE-2024-48905 · GHSA-9mp8-vffv-mgvx

HIGH 80

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00448 Published 2025-05-01 No fix listed CWE-284

TI-2024-32604 CVE-2024-48907 · GHSA-pf87-p9pq-44q4

HIGH 72

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2025-05-01 No fix listed CWE-918

TI-2024-32603 CVE-2024-48906 · GHSA-gwq8-8443-vx69

MEDIUM 60

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00284 Published 2025-05-01 No fix listed CWE-79