9.8

CVE-2018-8954

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ca ≫ Workload Control Center Version <= r11.4
Ca ≫ Workload Control Center Version sp1
Ca ≫ Workload Control Center Version sp2
Ca ≫ Workload Control Center Version sp3
Ca ≫ Workload Control Center Version sp4
Ca ≫ Workload Control Center Version sp5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.17% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/103742
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040605
Third Party Advisory
VDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180329-01--security-notice-for-ca-workload-automation-ae.html
Vendor Advisory