Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Profelis Component: Sambabox Clear all filters
TI-2022-09208 CVE-2022-25619 · GHSA-4j7w-gj5j-f325

Authenticated command injection to RCE in Profelis IT Consultancy SambaBox

Priority LOW 30

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00326 Published 2022-03-30 No fix listed CWE-77
TI-2022-09209 CVE-2022-25620 · GHSA-46qf-8hcj-5668

Stored cross-site scripting (XSS) in Profelis IT Consultancy SambaBox

Priority LOW 39

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vul…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00444 Published 2022-03-30 No fix listed CWE-80