Hammock

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-28719 Apr 28, 09:15 CRITICAL Act Now

Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass RCE Assetview Hammock

NVD

CVSS 3.1

9.8

EPSS

4.3%

CVE-2017-2241 Jul 17, 13:18 MEDIUM PATCH This Month

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service". Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity.

SQLi Apple Assetview Hammock

NVD

CVSS 3.0

6.3

EPSS

0.3%

CVE-2017-2240 Jul 17, 13:18 MEDIUM PATCH This Month

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service". Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Apple Assetview Hammock

NVD

CVSS 3.0

6.5

EPSS

0.8%

CVE-2022-28719

EPSS 4% CVSS 9.8

CRITICAL Act Now

Authentication Bypass RCE Assetview +1

NVD

CVE-2017-2241

EPSS 0% CVSS 6.3

MEDIUM PATCH This Month

SQLi Apple Assetview +1

NVD

CVE-2017-2240

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Path Traversal Apple Assetview +1

NVD