Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: HGiga iSherlock 4.5, iSherlock 5.5 147 Clear all filters
TI-2024-04002 CVE-2024-4299 · GHSA-wgx8-xhfh-5ph4

HGiga iSherlock - Command Injection

Priority LOW 38

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 147 CWE-78
TI-2024-04000 CVE-2024-4297 · GHSA-29q2-fp4w-f7hm

HGiga iSherlock - Arbitrary File Download

Priority LOW 24

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 147 CWE-22