Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: HGiga Component: Isherlock Clear all filters
TI-2024-04002 CVE-2024-4299 · GHSA-wgx8-xhfh-5ph4

HGiga iSherlock - Command Injection

Priority LOW 38

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 147 CWE-78
TI-2024-04001 CVE-2024-4298 · GHSA-8mvv-2pq8-4996

HGiga iSherlock - Command Injection

Priority LOW 38

The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileg…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 188 CWE-78
TI-2024-04000 CVE-2024-4297 · GHSA-29q2-fp4w-f7hm

HGiga iSherlock - Arbitrary File Download

Priority LOW 24

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 147 CWE-22
TI-2024-03999 CVE-2024-4296 · GHSA-4mp7-6gp5-x248

HGiga iSherlock - Arbitrary File Download

Priority LOW 26

The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative p…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 149 CWE-22
TI-2023-18922 CVE-2023-37292 · GHSA-h962-83vh-m65j

HGiga iSherlock - Command Injection

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Inj…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01318 Published 2023-07-21 Fixed in iSherlock-user-4.5-174, iSherlock-user-5.5-174 CWE-78