Read the docs

Softnext

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Softnext records in CISA KEV

No Softnext vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mail Sqr Expert 7 records MEDIUM Sn Os 1 record MEDIUM Spam Sqr 1 record LOW

Records

7 records in Mail Sqr Expert · all components

TI-2023-26238 CVE-2023-48380 · GHSA-8f68-68mm-w72g

Softnext Mail SQR Expert - Command Injection

Priority MEDIUM 44

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00675 Published 2023-12-15 No fix listed CWE-78
TI-2023-26236 CVE-2023-48378 · GHSA-pwmr-6x4v-frjm

Softnext Mail SQR Expert - Path Traversal

Priority MEDIUM 42

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22
TI-2023-26240 CVE-2023-48382 · GHSA-qg7w-3rf4-w97x

Softnext Mail SQR Expert - Local File Inclusion-2

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26239 CVE-2023-48381 · GHSA-66cg-w2v2-4p45

Softnext Mail SQR Expert - Local File Inclusion-1

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26237 CVE-2023-48379 · GHSA-g66f-25mw-6v67

Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Priority LOW 25

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00596 Published 2023-12-15 No fix listed CWE-918
Open these records in search →