Vulnerabilities in Smartertools
10 resultsVexday analysis
Smartertools apresenta perfil de risco baixo com apenas 1 vulnerabilidade conhecida na base e nenhuma sob ataque ativo ou crítica. A fraqueza identificada (CWE-497 - exposição de informação sensível) é de natureza moderada, e a ausência de publicações recentes indica que o risco não é emergente.
CVE-2026-23760CRITICALSmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APIEPSS 96.3%KEVCVE-2026-24423CRITICALSmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APIEPSS 87.7%KEVCVE-2025-52691CRITICALUpload Arbitrary FilesEPSS 85.5%KEVCVE-2022-24384HIGHReflective XSS on SmarterTrack v100.0.8019.14010EPSS 4.7%CVE-2022-24387CRITICALFile upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010EPSS 2.1%CVE-2022-24385MEDIUMInformation disclosure via direct object access on SmarterTrack v100.0.8019.14010EPSS 0.9%CVE-2022-24386HIGHStored XSS in SmarterTrack v100.0.8019.14010EPSS 0.7%CVE-2020-36926MEDIUMSmarterTools SmarterTrack 7922 -Information DisclosureEPSS 0.5%CVE-2026-26930HIGHSmarterTools SmarterMail before 9526 allows XSS via MAPI requests.EPSS 0.3%CVE-2026-25067MEDIUMSmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path CoercionEPSS 0.3%