CyberSecBulletin

Hammock vulnerabilities

We track 3 vulnerabilities in Hammock products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.

3vulnerabilities
1critical
2high
0exploited
8.8average CVSS score

Latest Hammock vulnerabilities

  • 8.5 High severity

    AssetView: Incorrect Permission Assignment for Critical Resource

    CVE-2026-101020Hammock

    An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Clie

  • 8.2 High severity

    AssetView: Missing Authentication for Critical Functionality

    CVE-2025-25060Hammock

    Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.

  • 9.8 Critical severity

    AssetView: Missing Authentication for Critical Functionality

    CVE-2022-28719HammockEPSS 4.68%

    Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the manage