Vendors / Snapt Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Snapt records in CISA KEV No Snapt vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 59
The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.25339 · Published 2022-03-21 · No fix listed CWE-78
Priority LOW 39
A Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00722 · Published 2022-03-21 · No fix listed CWE-352
Priority LOW 18
An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts.
CVSS 3.1 LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00559 · Published 2022-03-21 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
0 2 0 1 0
