CVE-2018-17925CWE-623

Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to…

published October 10, 2018

CVSS
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to GE iFIX versions 2.0 - 5.8 by Gigasoft. Only the independent use of the Gigasoft charting package outside the iFIX product may expose users to the reported vulnerability. The reported method shown to impact Internet Explorer is not exposed in the iFIX product, nor is the core functionality of the iFIX product known to be impacted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00304 · 22.8th percentile
Weakness
CWE-623 · Unsafe ActiveX Control Marked Safe For Scripting
Published
2018-10-10T17:00Z
EPSS history
Timeline
  • 10 OCT 17:00Z
    Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to…
    cvelistv5