Vulnerability Details CVE-2020-35851
HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.2%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 10.0
References
Products affected by CVE-2020-35851
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-114
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-81
-
cpe:2.3:a:hgiga:ssr45_isherlock-user:4.5-114