Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: HGiga MailSherlock MSR45/SSR45, MailSherlock MSR45/SSR45 120, 133 Clear all filters
TI-2020-18199 CVE-2020-35743 · GHSA-p6jx-ww27-x6x5

HGiga MailSherlock - SQL Injection -3

Priority LOW 34

HGiga MailSherlock contains a SQL injection flaw.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89
TI-2020-18198 CVE-2020-35742 · GHSA-xfr6-j4fr-qr42

HGiga MailSherlock - SQL Injection -1

Priority LOW 34

HGiga MailSherlock contains a vulnerability of SQL Injection.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89
TI-2020-18197 CVE-2020-35741 · GHSA-6w7j-r535-gc2c

HGiga MailSherlock - XSS -2

Priority LOW 32

HGiga MailSherlock does not validate user parameters on multiple login pages.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79
TI-2020-18196 CVE-2020-35740 · GHSA-r2gc-8vh7-8256

HGiga MailSherlock - XSS -1

Priority LOW 32

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79