İçeriğe atla
Noroxi

Sangfor kayıtları

sangfor üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%5,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2023-30805
    59Planlayın

    Sangfor Next-Gen Application Firewall Login Un Param Command Injection

    KritikCVSS 9,8İstismar yokEPSS %66

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2023-30806
    59Planlayın

    Sangfor Next-Gen Application Firewall PHPSESSID Command Injection

    KritikCVSS 9,8İstismar yokEPSS %66

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2023-30803
    44Planlayın

    Sangfor Next-Gen Application Firewall Authentication Bypass

    KritikCVSS 9,8İstismar yokEPSS %18

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2025-15501
    37İzleyin

    Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection

    YüksekCVSS 8,9İstismar yokEPSS %7

    sangfor · operation and maintenance security management system9 Oca 2026

  • CVE-2025-15500
    37İzleyin

    Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection

    YüksekCVSS 8,9İstismar yokEPSS %6

    sangfor · operation and maintenance management system9 Oca 2026

  • CVE-2026-1324
    31İzleyin

    Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection

    YüksekCVSS 7,4İstismar yokEPSS %7

    sangfor · operation and maintenance security management system22 Oca 2026

  • CVE-2025-15499
    31İzleyin

    Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection

    YüksekCVSS 7,4İstismar yokEPSS %6

    sangfor · operation and maintenance management system9 Oca 2026

  • CVE-2023-30804
    30İzleyin

    Sangfor Next-Gen Application Firewall Authenticated File Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %13

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2025-5129
    29İzleyin

    Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path

    YüksekCVSS 7,3İstismar yokEPSS %0

    sangfor · atrust24 May 2025

  • CVE-2025-15502
    24İzleyin

    Sangfor Operation and Maintenance Management System session SessionController os command injection

    OrtaCVSS 5,5İstismar yokEPSS %6

    sangfor · operation and maintenance security management system10 Oca 2026

  • CVE-2026-1412
    23İzleyin

    Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection

    OrtaCVSS 5,5İstismar yokEPSS %4

    sangfor · operation and maintenance security management system25 Oca 2026

  • CVE-2025-15503
    23İzleyin

    Sangfor Operation and Maintenance Management System common.jsp unrestricted upload

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    sangfor · operation and maintenance security management system10 Oca 2026

  • CVE-2026-1325
    22İzleyin

    Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery

    OrtaCVSS 5,5İstismar yokEPSS %1

    sangfor · operation and maintenance security management system22 Oca 2026

  • CVE-2022-22908
    22İzleyin

    SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents o

    OrtaCVSS 5,5İstismar yokEPSS %0

    sangfor · vdi client26 Şub 2022

  • CVE-2023-30802
    21İzleyin

    Sangfor Next-Gen Application Firewall Source Code Disclosure

    OrtaCVSS 5,3İstismar yokEPSS %1

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2025-12916
    10İzleyin

    Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %5

    sangfor · operation and maintenance security management system8 Kas 2025

  • CVE-2026-1414
    9İzleyin

    Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection

    DüşükCVSS 2,1İstismar yokEPSS %5

    sangfor · operation and maintenance security management system25 Oca 2026

  • CVE-2026-1413
    9İzleyin

    Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection

    DüşükCVSS 2,1İstismar yokEPSS %3

    sangfor · operation and maintenance security management system25 Oca 2026