Improper access control vulnerability in acmailer ver. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Command Injection
Acmailer
Acmailer Db
NVD
CVSS 3.1
9.8
EPSS
7.9%
Privilege chaining vulnerability in acmailer ver. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Privilege Escalation
Acmailer
Acmailer Db
NVD
CVSS 3.1
9.8
EPSS
3.3%
The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Information Disclosure
Xmlbeans
Oncommand Unified Manager Core Package
Snap Creator Framework
Snapmanager
+3
NVD
CVSS 3.1
9.1
EPSS
6.2%