Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Hillstonenet Clear all filters
TI-2024-07485 CVE-2024-8073 · GHSA-vp43-mc38-mmg5

Command Injection Vulnerability in Hillstone Networks Web Application Firewall

Priority MEDIUM 45

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01137 Published 2024-08-26 No fix listed CWE-20
TI-2023-25358 CVE-2023-46964 · GHSA-wx33-q8rc-vh2x

Cross-site scripting in Hillstone Next Generation FireWall SG-6000-E3960

Priority MEDIUM 60

Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00614 Published 2023-11-04 No fix listed CWE-79