2 matches found
CVE-2021-43360: Deserialization of Untrusted Data
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
9CVSS6.5AI score0.02404EPSS
SaveExploits0References2
PT-2017-18147
Name of the Vulnerable Software and Affected Versions HedEx versions earlier than V200R006C00 Description The issue allows an attacker to trick a user into accessing a website containing malicious scripts, potentially tampering with configurations and interrupting normal services due to a...
8.8CVSS0.00391EPSS
SaveExploits0References3
20