Northgrid Proself vulnerabilities
3 known vulnerabilities affecting northgrid/proself.
Total CVEs
3
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2023-45727P1HIGHCVSS 7.5KEVfixed in 1.09fixed in 1.66+1 more2023-10-18
CVE-2023-45727 [HIGH] CWE-611 CVE-2023-45727: Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containi
nvd
CVE-2023-39415P3HIGHCVSS 7.5≤ 1.07≤ 1.62+1 more2023-08-18
CVE-2023-39415 [HIGH] CWE-287 CVE-2023-39415: Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Pr
Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.
nvd
CVE-2023-39416P3HIGHCVSS 7.2≤ 1.07≤ 1.62+1 more2023-08-18
CVE-2023-39416 [HIGH] CWE-78 CVE-2023-39416: Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier
Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.
nvd