Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 28

Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00427 Published 2026-10-07 No fix listed CWE-79
Priority LOW 35

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in r…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00716 Published 2026-10-07 No fix listed CWE-22
Priority LOW 37

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially ena…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00526 Published 2026-10-07 No fix listed CWE-78
Priority MEDIUM 51

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00981 Published 2026-10-07 No fix listed CWE-441