Hgiga MSR35 Isherlock-Sysinfo vulnerabilities

2 CVEs affecting Hgiga MSR35 Isherlock-Sysinfo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9883, published 2019-06-03.

More from Hgiga.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-9883, published 2019-06-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via…
• CVE-2019-9882, published 2019-06-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via…