Profelis IT Consultancy

First CVE: Mar 30, 2022Active for: 4 years
2
CVEs Published
More CVEs Published than 6% of tracked CNAs
2.0
Avg CVEs / Year
More Avg CVEs / Year than 11% of tracked CNAs
7.8
Avg CVSS Score
Higher Avg CVSS Score than 82% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%

Self-Reporting Analysis

Of all the CVEs published by Profelis IT Consultancy as a CNA, 100.0% affect products that Profelis IT Consultancy develops as a vendor.

100.0%
Self-reported: 2Third-party: 0

Of all the CVEs published that affect products developed by Profelis IT Consultancy, 66.7% are self-published by Profelis IT Consultancy as a CNA.

66.7%
33.3%
Self-published: 2Published by other CNAs: 1

Trends Over Time

The number and severity of CVEs published by Profelis IT Consultancy over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 30, 2022
4 years ago
Most Recent CVE
Mar 30, 2022
1,578 days ago

Top CVEs

All CVEs published by Profelis IT Consultancy as a CNA, regardless of affected vendor or product.

2 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to
Mar 30, 20229.029NONO
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to caus
Mar 30, 20226.722NONO

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA2 CVEs
Severity distribution among all CVEs352,427 CVEs
MediumCritical
Attack Vector
Local1 (50.0%)
Network1 (50.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (50.0%)
Unknown0 (0.0%)
Required1 (50.0%)
Privileges Required
Low1 (50.0%)
High1 (50.0%)
None0 (0.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (2 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID published by Profelis IT Consultancy as a CNA.

Media Mentions

Media articles that mention a CVE ID published by Profelis IT Consultancy as a CNA — matched by CVE ID, not by organization name.

Top Affected Vendors

Top Affected Products

Top CWEs