Halo Service Solutions Haloitsm
4 CVEs affecting Halo Service Solutions Haloitsm. Latest disclosed: 2024-08-06. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6202 | Critical | 9.8 | 2024-08-06 | HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors… |
CVE-2024-6203 | High | 8.3 | 2024-08-06 | HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability. Poisoned password reset links can be sent to existing HaloITSM users… |
CVE-2024-6200 | High | 8.0 | 2024-08-06 | HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. The injected JavaScript code can execute arbitrary action on… |
CVE-2024-6201 | Medium | 5.3 | 2024-08-06 | HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of p… |