Описание
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:softnext:sn_os:10.3:-:*:*:*:*:*:*
cpe:2.3:o:softnext:sn_os:12.1:-:*:*:*:*:*:*
cpe:2.3:o:softnext:sn_os:12.3:-:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02509
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 9.8
github
больше 1 года назад
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.
EPSS
Процентиль: 85%
0.02509
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-78