Vulnerabilities

TI-2023-06694 CVE-2023-7327 · GHSA-5r7g-25f3-63r9

Ozeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read

MEDIUM 42

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02243 Published 2025-11-12 No fix listed CWE-22

TI-2020-10994 CVE-2020-14030 · GHSA-xfxx-vmw5-vf7w

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

LOW 35

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01836 Published 2020-09-29 No fix listed CWE-502

TI-2020-10986 CVE-2020-14022 · GHSA-9q88-264f-9cgp

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk…

MEDIUM 42

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01842 Published 2020-09-22 No fix listed CWE-434

TI-2020-10989 CVE-2020-14025 · GHSA-55qc-4wg3-f2p8

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.

LOW 39

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00535 Published 2020-09-22 No fix listed CWE-352

TI-2020-10988 CVE-2020-14024 · GHSA-67pm-3c62-w89c

Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected…

LOW 28

Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient field in the Mailbox feature, (2) OZFORM_GROUPNAME field in the Group configura…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00719 Published 2020-09-22 No fix listed CWE-79

TI-2020-10987 CVE-2020-14023 · GHSA-9fc4-hf3h-f527

Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.

LOW 24

Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00979 Published 2020-09-22 No fix listed CWE-918

TI-2020-10990 CVE-2020-14026 · GHSA-9rcr-qh8q-m9m6

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of…

MEDIUM 42

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that is mishandled in a CSV export.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01732 Published 2020-09-22 No fix listed CWE-1236

TI-2020-10991 CVE-2020-14027 · GHSA-53ph-mcf9-r8mc

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

LOW 26

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00843 Published 2020-09-22 No fix listed CWE-88

TI-2020-10992 CVE-2020-14028 · GHSA-rpvq-7m68-cp2r

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

LOW 35

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01864 Published 2020-09-22 No fix listed CWE-22

TI-2020-10995 CVE-2020-14031 · GHSA-3p6f-5r42-cg3p

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

LOW 35

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0159 Published 2020-09-22 No fix listed

TI-2020-10985 CVE-2020-14021 · GHSA-4p72-53xh-hr8g

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

LOW 25

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01145 Published 2020-09-18 No fix listed

TI-2020-10993 CVE-2020-14029 · GHSA-j5rv-8887-pg3h

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

LOW 36

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2020-09-18 No fix listed CWE-611

TI-2006-06418 CVE-2006-6674 · GHSA-prj4-jm4c-9fqw

Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in…

LOW 11

Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVersion\Plugins\httpsmsgate registry key, which allows local users to obtain sensi…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00328 Published 2006-12-21 No fix listed CWE-310

Vulnerabilities

Filters