Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: HGiga Component: Oaklouds Mailsherlock Clear all filters
TI-2023-10342 CVE-2023-24842 · GHSA-775x-85h4-43cp

HGiga MailSherlock - Broken Access Control

Priority LOW 31

HGiga MailSherlock has vulnerability of insufficient access control.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00595 Published 2023-03-27 No fix listed CWE-639
TI-2023-10341 CVE-2023-24841 · GHSA-6xj9-g6q5-f8xc

HGiga MailSherlock - Command Injection

Priority LOW 35

HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 No fix listed CWE-78
TI-2023-10340 CVE-2023-24840 · GHSA-98vq-g327-7379

HGiga MailSherlock - SQL Injection

Priority LOW 35

HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 No fix listed CWE-89
TI-2023-10339 CVE-2023-24839 · GHSA-92cv-rhgw-5fm8

HGiga MailSherlock - Reflected XSS

Priority LOW 28

HGiga MailSherlock’s specific function has insufficient filtering for user input.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00494 Published 2023-03-27 No fix listed CWE-79
TI-2018-12500 CVE-2018-17542 · GHSA-77r5-xf97-q83j

SQL injection in HGiga MailSherlock

Priority LOW 27

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi requ…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01229 Published 2019-02-11 Fixed in 1.5.235 CWE-89