H Sphere

Vendor:

First CVE: Mar 13, 2009 · Active for 17 years

3
Total CVEs
More Total CVEs than 64% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
5.7
Avg CVSS
Higher Avg CVSS than 17% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact H Sphere over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 13, 2009
17 years ago
Most Recent CVE
May 16, 2022
1,532 days ago

CVE Severity & Scoring

H Sphere3 CVEs
All CVEs352,708 CVEs
Medium
Attack Vector
Local0 (0.0%)
Network1 (33.3%)
Unknown2 (66.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (33.3%)
High0 (0.0%)
Unknown2 (66.7%)
User Interaction
None0 (0.0%)
Unknown2 (66.7%)
Required1 (33.3%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (33.3%)
Unknown2 (66.7%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
May 16, 20226.125NOYES
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTM
Mar 13, 20094.322NOYES
Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add
Sep 19, 20126.821NONO

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
66.7% of CVEs· 99th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For H Sphere

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
3.6.216.12.2%01
3.316.80.9%00
3.114.35.1%01
3.0.014.35.1%01