CVE-2015-2210

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to…

published September 6, 2017

CVSS
—
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.3th percentile
Published
2017-09-06T21:00Z
EPSS history
Timeline
  • 06 SEP 21:00Z
    The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to…
    cvelistv5