CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2024-6201

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of potentially sensitive information. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.1%

CVSS Severity

CVSS v3 Score 5.3

References

https://haloitsm.com/guides/article/?kbid=2153

Products affected by CVE-2024-6201

Haloservicesolutions » Haloitsm » Version: N/A

cpe:2.3:a:haloservicesolutions:haloitsm:-
Haloservicesolutions » Haloitsm » Version: 2.143.8

cpe:2.3:a:haloservicesolutions:haloitsm:2.143.8
Haloservicesolutions » Haloitsm » Version: 2.144

cpe:2.3:a:haloservicesolutions:haloitsm:2.144
Haloservicesolutions » Haloitsm » Version: 2.146

cpe:2.3:a:haloservicesolutions:haloitsm:2.146

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-6201

Products

Pricing

Contact Us