| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-15141 | Halo Configuration actuator information disclosure | - | Halo | Low | 3.1 | 2025-12-28 15:02:05 | Deep Dive |
| CVE-2025-14117 | fit2cloud Halo cross-site request forgery | fit2cloud | Halo | Medium | 4.3 | 2025-12-06 05:32:06 | Deep Dive |
| CVE-2024-56156 | Halo Vulnerable to Stored XSS and RCE via File Upload Bypass | halo-dev | halo | 中危 | - | 2025-04-25 15:08:01 | Deep Dive |
| CVE-2024-45252 | Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | Elsight | Halo version 11.7.1.5 | Critical | 9.8 | 2024-10-06 12:26:12 | Deep Dive |
| CVE-2024-45251 | Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | Elsight | Halo version 11.7.1.5 | Critical | 9.8 | 2024-10-06 12:25:17 | Deep Dive |
| CVE-2024-43793 | Halo's editor has a stored XSS vulnerability | halo-dev | halo | Medium | 6.3 | 2024-09-11 14:37:58 | Deep Dive |
| CVE-2024-43792 | Halo's editor has a stored Cross-Site Scripting vulnerability | halo-dev | halo | Medium | 6.3 | 2024-09-02 16:15:40 | Deep Dive |
| CVE-2024-6203 | HaloITSM - Password Reset Poisoning | Halo Service Solutions | HaloITSM | High | 8.3 | 2024-08-06 06:03:11 | Deep Dive |
| CVE-2024-6202 | HaloITSM - SAML XML Signature Wrapping (XSW) | Halo Service Solutions | HaloITSM | Critical | 9.8 | 2024-08-06 06:01:41 | Deep Dive |
| CVE-2024-6201 | HaloITSM - Emailing Template Injection | Halo Service Solutions | HaloITSM | Medium | 5.3 | 2024-08-06 05:59:30 | Deep Dive |
| CVE-2024-6200 | HaloITSM - Stored Cross-Site Scripting in Tickets | Halo Service Solutions | HaloITSM | High | 8.0 | 2024-08-06 05:54:54 | Deep Dive |
| CVE-2022-36784 | Elsight – Elsight Halo Remote Code Execution (RCE) | Elsight | Elsight Halo | Critical | 9.8 | 2022-11-17 22:27:54 | Deep Dive |
| CVE-2022-22125 | Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag | halo-dev | halo | Medium | 4.8 | 2022-01-13 16:45:18 | Deep Dive |
| CVE-2022-22124 | Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image | halo-dev | halo | Medium | 5.4 | 2022-01-13 16:45:16 | Deep Dive |
| CVE-2022-22123 | Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title | halo-dev | halo | Medium | 5.4 | 2022-01-13 16:45:15 | Deep Dive |
| CVE-2019-5625 | Eaton Halo Home Android App Insecure Storage | Eaton | HALO Home | 高危 | - | 2019-05-22 18:11:12 | Deep Dive |