Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Softnext Component: Mail Sqr Expert Clear all filters
TI-2023-26240 CVE-2023-48382 · GHSA-qg7w-3rf4-w97x

Softnext Mail SQR Expert - Local File Inclusion-2

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26239 CVE-2023-48381 · GHSA-66cg-w2v2-4p45

Softnext Mail SQR Expert - Local File Inclusion-1

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26238 CVE-2023-48380 · GHSA-8f68-68mm-w72g

Softnext Mail SQR Expert - Command Injection

Priority MEDIUM 44

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00675 Published 2023-12-15 No fix listed CWE-78
TI-2023-26237 CVE-2023-48379 · GHSA-g66f-25mw-6v67

Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Priority LOW 25

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00596 Published 2023-12-15 No fix listed CWE-918
TI-2023-26236 CVE-2023-48378 · GHSA-pwmr-6x4v-frjm

Softnext Mail SQR Expert - Path Traversal

Priority MEDIUM 42

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22