Sematell Replyone
3 CVEs affecting Sematell Replyone. Latest disclosed: 2025-05-01. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-48905 | Critical | 9.1 | 2025-05-01 | Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint. |
CVE-2024-48907 | High | 7.5 | 2025-05-01 | Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API. |
CVE-2024-48906 | Medium | 6.1 | 2025-05-01 | Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name. |