Approved changes feed: RSS · Atom

cpe:2.3:a:hgiga:isherlock:5.5:*:*:*:*:*:*:*

part: a version: 5.5 update: *

VendorHgiga (3395f64f-c7c9-5c57-a478-cf9fa807fa6c)
ProductIsherlock (1c53c784-074c-5229-b831-ce14356278fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4299 vulnerable 2026-06-03 14:57:15.154966 HGiga iSherlock - Command Injection
HIGH (7.2)
The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.
Published: 2024-04-29T03:15:18.038Z
Updated: 2025-07-14T02:21:35.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4298 vulnerable 2026-06-03 14:57:15.154372 HGiga iSherlock - Command Injection
HIGH (7.2)
The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.
Published: 2024-04-29T02:39:04.580Z
Updated: 2025-07-14T02:19:23.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.