VendorsHGigamsr45_isherlock-userany version
Vulnerabilities

HGiga MSR45 iSherlock-user any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2020-35851
HGiga MailSherlock - Command Injection
Published 2020-12-31 · Modified
10.0EPSS 0.017
CVE-2020-25848
HGiga MailSherlock - Broken Authentication
Published 2020-12-31 · Modified
10.0EPSS 0.017
CVE-2021-22848
HGiga MailSherlock - SQL Injection-2
Published 2021-03-18 · Modified
9.8EPSS 0.010
CVE-2019-9882
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist.
Published 2019-06-03 · Modified
8.8EPSS 0.007
CVE-2019-9883
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account.
Published 2019-06-03 · Modified
8.8EPSS 0.007
CVE-2020-25850
HGiga MailSherlock - Arbitrary File Download
Published 2020-12-31 · Modified
8.1EPSS 0.011
CVE-2020-35742
HGiga MailSherlock - SQL Injection -1
Published 2020-12-31 · Modified
7.6EPSS 0.006
CVE-2020-35743
HGiga MailSherlock - SQL Injection -3
Published 2020-12-31 · Modified
7.6EPSS 0.006
CVE-2020-35740
HGiga MailSherlock - XSS -1
Published 2020-12-31 · Modified
7.0EPSS 0.006
CVE-2020-35741
HGiga MailSherlock - XSS -2
Published 2020-12-31 · Modified
7.0EPSS 0.006