Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-3362

HGiga iSherlock - OS Command Injection

Description

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HGiga iSherlock 4.5

Default version status: unaffected

  • 0 to < 236affected

HGiga iSherlock 5.5

Default version status: unaffected

  • 0 to < 236affected

References