Sign in Free assessment

hammock records

3 published records for vendor hammock.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

17
22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-28719No exploit	Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge ohammock · assetview · CWE-306 pre-auth RCE Auth bypass	Critical9.8	—	4.7%	Apr 28, 2022
26Monitor	CVE-2017-2240No exploit	Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via hammock · assetview · CWE-22 Path traversal	Medium6.5	—	1.6%	Jul 17, 2017
25Monitor	CVE-2017-2241No exploit	SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commahammock · assetview · CWE-89 RCE SQL injection	Medium6.3	—	0.7%	Jul 17, 2017

CVE-2022-28719
40Plan
Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge o
CriticalCVSS 9.8No exploitEPSS 5%
- pre-auth RCE
- Auth bypass
hammock · assetviewApr 28, 2022
CVE-2017-2240
26Monitor
Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via
MediumCVSS 6.5No exploitEPSS 2%
- Path traversal
hammock · assetviewJul 17, 2017
CVE-2017-2241
25Monitor
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL comma
MediumCVSS 6.3No exploitEPSS 1%
- RCE
- SQL injection
hammock · assetviewJul 17, 2017