Vendor archive

haloservicesolutions CVEs

Beta · best-effort

4 CVEs tagged to vendor haloservicesolutions — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2024-6203

Published Aug 6, 2024

HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability. Poisoned password reset links can be sent to existing HaloITSM users (given their email a…

CVSS 8.3 · High

Vendor/product tagsBeta · best-effort

CVE-2024-6202

Published Aug 6, 2024

HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors could impersonate ar…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-6201

Published Aug 6, 2024

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of potentially sensitive…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-6200

Published Aug 6, 2024

HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. The injected JavaScript code can execute arbitrary action on behalf of the user…

CVSS 8.0 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1