Profelis

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-7015 Sep 09, 14:15 HIGH This Week

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.2. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Passbox Profelis

NVD VulDB

CVSS 4.0

7.1

EPSS

0.1%

CVE-2022-25620 Mar 30, 15:15 CRITICAL Act Now

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Sambabox Profelis

NVD

CVSS 3.1

9.0

EPSS

0.4%

CVE-2022-25619 Mar 30, 15:15 MEDIUM This Month

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Command Injection Sambabox Profelis

NVD

CVSS 3.1

6.7

EPSS

0.3%

CVE-2024-7015

EPSS 0% CVSS 7.1

HIGH This Week

Authentication Bypass Passbox Profelis

NVD VulDB

CVE-2022-25620

EPSS 0% CVSS 9.0

CRITICAL Act Now

XSS Sambabox Profelis

NVD

CVE-2022-25619

EPSS 0% CVSS 6.7

MEDIUM This Month

RCE Command Injection Sambabox +1

NVD