Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Hammock Corporation Component: Assetview Clear all filters
TI-2022-11361 CVE-2022-28719 · GHSA-jw2m-w7c2-h66c

Missing authentication in Hammock Corporation AssetView

Priority MEDIUM 50

Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managin…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04677 Published 2022-04-28 No fix listed CWE-306
TI-2017-01531 CVE-2017-2241 · GHSA-25j4-vfxf-h9xv

SQL injection in Hammock Corporation AssetView for MacOS

Priority LOW 29

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00731 Published 2017-07-14 No fix listed CWE-89
TI-2017-01530 CVE-2017-2240 · GHSA-mphx-8gxr-8rp6

Path traversal in Hammock Corporation AssetView for MacOS

Priority LOW 32

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01618 Published 2017-07-14 No fix listed CWE-22