VDB
CVE-2024-31946
CVE-2024-31946
PUBLISHED
CVSS 4.199999809265137 MEDIUM
An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript, executed by the template preview. The following versions fix this: 3.7.42, 3.11.30, 4.3.25, and 4.7.5.
EPSS 0.06% · 18.9th percentile
Risk Scores
CVSS 3.1
4.199999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.06%
18.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Stormshield | Stormshield Network Security | |
| n/a | n/a | n/a |
Exploit Intelligence
Timeline
- Jul 15, 2024 CVE Published
- Jul 16, 2024 EPSS Score
- Aug 7, 2024 EPSS Score
- Aug 29, 2024 EPSS Score
- Sep 19, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 11, 2024 EPSS Score
- Oct 30, 2024 Coalition ESS Score
- Oct 30, 2024 CVE Updated
- Nov 2, 2024 EPSS Score
- Nov 24, 2024 EPSS Score
- Dec 17, 2024 EPSS Score