Every CVE whose affected-product data names Hgiga Oaklouds Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2021-37912 — CVSS 9.8 (critical): The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting…
CVE-2021-37913 — CVSS 9.8 (critical): The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting…
CVE-2023-25909 — CVSS 9.8 (critical): HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit…
CVE-2022-38118 — CVSS 8.8 (high): OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can…
CVE-2021-22850 — CVSS 5.3 (medium): HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.