Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Softnext Clear all filters
TI-2024-05265 CVE-2024-5670 · GHSA-gg52-x92p-v5qj

Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection

Priority MEDIUM 51

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2024-07-29 Fixed in 230922, 230631 CWE-78
TI-2023-26240 CVE-2023-48382 · GHSA-qg7w-3rf4-w97x

Softnext Mail SQR Expert - Local File Inclusion-2

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26239 CVE-2023-48381 · GHSA-66cg-w2v2-4p45

Softnext Mail SQR Expert - Local File Inclusion-1

Priority LOW 30

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00617 Published 2023-12-15 No fix listed CWE-22
TI-2023-26238 CVE-2023-48380 · GHSA-8f68-68mm-w72g

Softnext Mail SQR Expert - Command Injection

Priority MEDIUM 44

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00675 Published 2023-12-15 No fix listed CWE-78
TI-2023-26237 CVE-2023-48379 · GHSA-g66f-25mw-6v67

Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Priority LOW 25

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00596 Published 2023-12-15 No fix listed CWE-918
TI-2023-26236 CVE-2023-48378 · GHSA-pwmr-6x4v-frjm

Softnext Mail SQR Expert - Path Traversal

Priority MEDIUM 42

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22
TI-2023-10335 CVE-2023-24835 · GHSA-gpxg-3cwf-59mg

Softnext SPAM SQR - Code Injection

Priority LOW 35

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 Fixed in 2.221231 CWE-94