9.3
CVE-2018-16364
- EPSS 2.36%
- Veröffentlicht 26.09.2018 21:29:01
- Zuletzt bearbeitet 21.11.2024 03:52:36
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Applications Manager Version13.7 Update-
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13700
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13710
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13720
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13730
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13750
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13760
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13770
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13780
Zohocorp ≫ Manageengine Applications Manager Version13.7 Updatebuild13790
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.36% | 0.834 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.2 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.