Mail SQR Expert vulnerabilities
3 known vulnerabilities in Mail SQR Expert from Softnext. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
SN OS 12.1: Improper Neutralization of Special Elements used in an OS Command
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.
- 8.0 High severity
Mail SQR Expert: Improper Neutralization of Special Elements used in an OS Command
Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to ex
- 7.5 High severity
Mail SQR Expert: Improper Limitation of a Pathname to a Restricted Directory
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.