CVE-2018-20221

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an…

published March 17, 2019

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10269 · 95.7th percentile
Published
2019-03-17T20:54Z
EPSS history
Timeline
  • 17 MAR 20:54Z
    Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an…
    cvelistv5