Vulnerabilities > Hillstonenet

DATE CVE VULNERABILITY TITLE RISK
2023-11-05 CVE-2023-46964 Cross-site Scripting vulnerability in Hillstonenet Sc-6000-E3960 Firmware 5.5
Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.
network
low complexity
hillstonenet CWE-79
6.1
2022-12-27 CVE-2022-45778 Unspecified vulnerability in Hillstonenet products
https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect Access Control.
network
low complexity
hillstonenet
critical
9.8