Netsarang Xshell — known CVE vulnerabilities

Every CVE whose affected-product data names Netsarang Xshell, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-42095 — CVSS 7.5 (high): Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.
• CVE-2022-27966 — CVSS 6.5 (medium): Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
• CVE-2021-37326 — CVSS 5.3 (medium): NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.