Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Halo Service Solutions Clear all filters
TI-2024-05752 CVE-2024-6203 · GHSA-q664-v9r4-qmrg

HaloITSM - Password Reset Poisoning

Priority LOW 38

HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00389 Published 2024-08-06 Fixed in 2.146.1 CWE-640
TI-2024-05751 CVE-2024-6202 · GHSA-2jwq-w78h-4r89

HaloITSM - SAML XML Signature Wrapping (XSW)

Priority MEDIUM 49

HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2024-08-06 Fixed in 2.146.1 CWE-863
TI-2024-05750 CVE-2024-6201 · GHSA-53fg-j4pj-j8mf

HaloITSM - Emailing Template Injection

Priority LOW 30

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00309 Published 2024-08-06 Fixed in 2.146.1
TI-2024-05749 CVE-2024-6200 · GHSA-59j7-j82m-4gmq

HaloITSM - Stored Cross-Site Scripting in Tickets

Priority LOW 37

HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00355 Published 2024-08-06 Fixed in 2.146.1 CWE-79