Skip to main content

Softnext

9 CVEs vendor

Monthly

CVE-2024-5670 Jul 29, 03:15 CRITICAL Act Now

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Sn Os Softnext
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2023-48382 Dec 15, 09:15 MEDIUM This Month

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Mail Sqr Expert Softnext
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2023-48381 Dec 15, 09:15 MEDIUM This Month

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Mail Sqr Expert Softnext
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2023-48380 Dec 15, 09:15 HIGH This Week

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Mail Sqr Expert Softnext
NVD
CVSS 3.1
8.0
EPSS
0.7%
CVE-2023-48379 Dec 15, 08:15 MEDIUM This Month

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Mail Sqr Expert Softnext
NVD
CVSS 3.1
5.3
EPSS
0.6%
CVE-2023-48378 Dec 15, 08:15 HIGH This Week

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Mail Sqr Expert Softnext
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2023-24835 Mar 27, 04:15 HIGH This Week

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Spam Sqr Softnext
NVD
CVSS 3.1
7.2
EPSS
0.9%
CVE-2022-40742 Oct 31, 07:15 MEDIUM This Month

Mail SQR Expert system has a Local File Inclusion vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Mail Sqr Expert Softnext
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-40741 Oct 31, 07:15 CRITICAL Act Now

Mail SQR Expert’s specific function has insufficient filtering for special characters. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Mail Sqr Expert Softnext
NVD
CVSS 3.1
9.8
EPSS
1.1%
EPSS 1% CVSS 9.8
CRITICAL Act Now

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Sn Os Softnext
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Mail Sqr Expert +1
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Mail Sqr Expert +1
NVD
EPSS 1% CVSS 8.0
HIGH This Week

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Mail Sqr Expert Softnext
NVD
EPSS 1% CVSS 5.3
MEDIUM This Month

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Mail Sqr Expert Softnext
NVD
EPSS 1% CVSS 7.5
HIGH This Week

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Mail Sqr Expert Softnext
NVD
EPSS 1% CVSS 7.2
HIGH This Week

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Spam Sqr +1
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

Mail SQR Expert system has a Local File Inclusion vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Mail Sqr Expert +1
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

Mail SQR Expert’s specific function has insufficient filtering for special characters. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Mail Sqr Expert Softnext
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy