7.2

CVE-2025-63911

Exploit
Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cohesity ≫ Tranzman Version 4.0 Update build14614
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.32% 0.812
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
MITRE 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://github.com/GregDurys/Cohesity-TranZman-CVEs
Third Party Advisory
https://gist.github.com/GregDurys/8b7a3022c04b6cee8c1e1af04f5671b2
Third Party Advisory
Exploit