Read the docs

Softnext

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Softnext records in CISA KEV

No Softnext vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mail Sqr Expert 7 records MEDIUM Sn Os 1 record MEDIUM Spam Sqr 1 record LOW

Records

9 records

TI-2024-05265 CVE-2024-5670 · GHSA-gg52-x92p-v5qj

Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection

Priority MEDIUM 51

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2024-07-29 Fixed in 230922, 230631 CWE-78
TI-2023-26238 CVE-2023-48380 · GHSA-8f68-68mm-w72g

Softnext Mail SQR Expert - Command Injection

Priority MEDIUM 44

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00675 Published 2023-12-15 No fix listed CWE-78
TI-2023-26236 CVE-2023-48378 · GHSA-pwmr-6x4v-frjm

Softnext Mail SQR Expert - Path Traversal

Priority MEDIUM 42

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22
TI-2023-10335 CVE-2023-24835 · GHSA-gpxg-3cwf-59mg

Softnext SPAM SQR - Code Injection

Priority LOW 35

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 Fixed in 2.221231 CWE-94
TI-2023-26240 CVE-2023-48382 · GHSA-qg7w-3rf4-w97x

Softnext Mail SQR Expert - Local File Inclusion-2

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26239 CVE-2023-48381 · GHSA-66cg-w2v2-4p45

Softnext Mail SQR Expert - Local File Inclusion-1

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26237 CVE-2023-48379 · GHSA-g66f-25mw-6v67

Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Priority LOW 25

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00596 Published 2023-12-15 No fix listed CWE-918
Open these records in search →