freescout kayıtları
freescout üreticisine ait 46 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %4,3
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %76,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12
- CWE-841 Improper Enforcement of Behavioral Workflow7
- CWE-863 Incorrect Authorization4
- CWE-434 Unrestricted Upload of File with Dangerous Type4
- CWE-502 Deserialization of Untrusted Data3
- CWE-330 Use of Insufficiently Random Values2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
46 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-27637İstismar yok | FreeScout's Predictable Authentication Token Enables Account Takeoverfreescout · freescout · CWE-330 | Kritik9,8 | — | %0,8 | 25 Şub 2026 |
37İzleyin | CVE-2024-29185İstismar yok | FreeScout OS Command Injection vulnerabilityfreescout · freescout · CWE-78 | Kritik9,0 | — | %1,7 | 22 Mar 2024 |
37İzleyin | CVE-2026-32754İstismar yok | FreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})freescout · freescout · CWE-79 | Kritik9,3 | — | %0,6 | 19 Mar 2026 |
36İzleyin | CVE-2026-27636Silahlaştırılmış | FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apachefreescout · freescout · CWE-434 | Yüksek8,8 | — | %2,1 | 25 Şub 2026 |
35İzleyin | CVE-2026-40498İstismar yok | FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cronfreescout · freescout · CWE-200 | Yüksek8,9 | — | %0,7 | 21 Nis 2026 |
35İzleyin | CVE-2026-40496İstismar yok | FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Forcefreescout · freescout · CWE-330 | Yüksek8,8 | — | %0,5 | 20 Nis 2026 |
34İzleyin | CVE-2025-54366İstismar yok | FreeScout's deserialization of untrusted data leads to Remote Code Executionfreescout · freescout · CWE-502 | Yüksek8,6 | — | %1,0 | 26 Tem 2025 |
34İzleyin | CVE-2025-48389İstismar yok | FreeScout Vulnerable to Deserialization of Untrusted Datafreescout · freescout · CWE-502 | Yüksek8,6 | — | %0,9 | 29 May 2025 |
34İzleyin | CVE-2025-48390İstismar yok | FreeScout Vulnerable to Remote Code Execution (RCE)freescout · freescout · CWE-94 | Yüksek8,6 | — | %0,9 | 29 May 2025 |
34İzleyin | CVE-2025-58163İstismar yok | FreeScout's deserialization of untrusted data can lead to Remote Code Executionfreescout · freescout · CWE-502 | Yüksek8,6 | — | %0,7 | 2 Eyl 2025 |
34İzleyin | CVE-2025-48479İstismar yok | FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841 | Yüksek8,5 | — | %0,3 | 30 May 2025 |
34İzleyin | CVE-2026-32753İstismar yok | FreeScout: Stored XSS through SVG file upload with filter bypassfreescout · freescout · CWE-80 | Yüksek8,5 | — | %0,3 | 19 Mar 2026 |
33İzleyin | CVE-2026-28289Silahlaştırılmış | FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Executionfreescout · freescout · CWE-434 | Yüksek8,1 | — | %2,6 | 3 Mar 2026 |
32İzleyin | CVE-2024-29184İstismar yok | FreeScout Stored XSS to Privilege Escalation After CSP Bypassfreescout · freescout · CWE-79 | Yüksek8,0 | — | %0,9 | 22 Mar 2024 |
32İzleyin | CVE-2026-32752İstismar yok | FreeScout: Broken Access Control in ThreadPolicy — Any User Can Read/Edit All Customer Messagesfreescout · freescout · CWE-284 | Yüksek8,1 | — | %0,4 | 19 Mar 2026 |
32İzleyin | CVE-2026-40497İstismar yok | FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration)freescout · freescout · CWE-79 | Yüksek8,1 | — | %0,4 | 20 Nis 2026 |
30İzleyin | CVE-2026-39384İstismar yok | FreeScout Customer Merge Cross-Mailbox Authorization Bypassfreescout · freescout · CWE-639 | Yüksek7,6 | — | %0,3 | 7 Nis 2026 |
28İzleyin | CVE-2025-48471İstismar yok | FreeScout Vulnerable to Arbitrary File Uploadfreescout · freescout · CWE-434 | Yüksek7,0 | — | %1,1 | 29 May 2025 |
28İzleyin | CVE-2024-28186İstismar yok | SMTP Mail Credentials Disclosed in Error Log in freescoutfreescout · freescout · CWE-532 | Yüksek7,1 | — | %0,6 | 12 Mar 2024 |
28İzleyin | CVE-2025-48476İstismar yok | FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841 | Yüksek7,1 | — | %0,5 | 30 May 2025 |
28İzleyin | CVE-2025-48477İstismar yok | FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841 | Yüksek7,1 | — | %0,5 | 30 May 2025 |
28İzleyin | CVE-2025-48478İstismar yok | FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841 | Yüksek7,0 | — | %0,4 | 30 May 2025 |
28İzleyin | CVE-2025-48388İstismar yok | FreeScout Has Insufficient Protection Against CRLF-injectionfreescout · freescout · CWE-93 | Yüksek7,0 | — | %0,4 | 29 May 2025 |
28İzleyin | CVE-2025-48480İstismar yok | FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841 | Yüksek7,0 | — | %0,3 | 30 May 2025 |
27İzleyin | CVE-2025-48472İstismar yok | FreeScout Vulnerable to Insufficient Authorizationfreescout · freescout · CWE-863 | Orta6,9 | — | %0,4 | 29 May 2025 |
- CVE-2026-2763739İzleyin
FreeScout's Predictable Authentication Token Enables Account Takeover
KritikCVSS 9,8İstismar yokEPSS %1freescout · freescout25 Şub 2026
- CVE-2024-2918537İzleyin
FreeScout OS Command Injection vulnerability
KritikCVSS 9,0İstismar yokEPSS %2freescout · freescout22 Mar 2024
- CVE-2026-3275437İzleyin
FreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})
KritikCVSS 9,3İstismar yokEPSS %1freescout · freescout19 Mar 2026
- CVE-2026-2763636İzleyin
FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apache
YüksekCVSS 8,8SilahlaştırılmışEPSS %2freescout · freescout25 Şub 2026
- CVE-2026-4049835İzleyin
FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cron
YüksekCVSS 8,9İstismar yokEPSS %1freescout · freescout21 Nis 2026
- CVE-2026-4049635İzleyin
FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force
YüksekCVSS 8,8İstismar yokEPSS %1freescout · freescout20 Nis 2026
- CVE-2025-5436634İzleyin
FreeScout's deserialization of untrusted data leads to Remote Code Execution
YüksekCVSS 8,6İstismar yokEPSS %1freescout · freescout26 Tem 2025
- CVE-2025-4838934İzleyin
FreeScout Vulnerable to Deserialization of Untrusted Data
YüksekCVSS 8,6İstismar yokEPSS %1freescout · freescout29 May 2025
- CVE-2025-4839034İzleyin
FreeScout Vulnerable to Remote Code Execution (RCE)
YüksekCVSS 8,6İstismar yokEPSS %1freescout · freescout29 May 2025
- CVE-2025-5816334İzleyin
FreeScout's deserialization of untrusted data can lead to Remote Code Execution
YüksekCVSS 8,6İstismar yokEPSS %1freescout · freescout2 Eyl 2025
- CVE-2025-4847934İzleyin
FreeScout Has Business Logic Errors
YüksekCVSS 8,5İstismar yokEPSS %0freescout · freescout30 May 2025
- CVE-2026-3275334İzleyin
FreeScout: Stored XSS through SVG file upload with filter bypass
YüksekCVSS 8,5İstismar yokEPSS %0freescout · freescout19 Mar 2026
- CVE-2026-2828933İzleyin
FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Execution
YüksekCVSS 8,1SilahlaştırılmışEPSS %3freescout · freescout3 Mar 2026
- CVE-2024-2918432İzleyin
FreeScout Stored XSS to Privilege Escalation After CSP Bypass
YüksekCVSS 8,0İstismar yokEPSS %1freescout · freescout22 Mar 2024
- CVE-2026-3275232İzleyin
FreeScout: Broken Access Control in ThreadPolicy — Any User Can Read/Edit All Customer Messages
YüksekCVSS 8,1İstismar yokEPSS %0freescout · freescout19 Mar 2026
- CVE-2026-4049732İzleyin
FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration)
YüksekCVSS 8,1İstismar yokEPSS %0freescout · freescout20 Nis 2026
- CVE-2026-3938430İzleyin
FreeScout Customer Merge Cross-Mailbox Authorization Bypass
YüksekCVSS 7,6İstismar yokEPSS %0freescout · freescout7 Nis 2026
- CVE-2025-4847128İzleyin
FreeScout Vulnerable to Arbitrary File Upload
YüksekCVSS 7,0İstismar yokEPSS %1freescout · freescout29 May 2025
- CVE-2024-2818628İzleyin
SMTP Mail Credentials Disclosed in Error Log in freescout
YüksekCVSS 7,1İstismar yokEPSS %1freescout · freescout12 Mar 2024
- CVE-2025-4847628İzleyin
FreeScout Has Business Logic Errors
YüksekCVSS 7,1İstismar yokEPSS %1freescout · freescout30 May 2025
- CVE-2025-4847728İzleyin
FreeScout Has Business Logic Errors
YüksekCVSS 7,1İstismar yokEPSS %0freescout · freescout30 May 2025
- CVE-2025-4847828İzleyin
FreeScout Has Business Logic Errors
YüksekCVSS 7,0İstismar yokEPSS %0freescout · freescout30 May 2025
- CVE-2025-4838828İzleyin
FreeScout Has Insufficient Protection Against CRLF-injection
YüksekCVSS 7,0İstismar yokEPSS %0freescout · freescout29 May 2025
- CVE-2025-4848028İzleyin
FreeScout Has Business Logic Errors
YüksekCVSS 7,0İstismar yokEPSS %0freescout · freescout30 May 2025
- CVE-2025-4847227İzleyin
FreeScout Vulnerable to Insufficient Authorization
OrtaCVSS 6,9İstismar yokEPSS %0freescout · freescout29 May 2025