CVE-2019-3630

Command Injection could allow authenticated users to execute arbitrary code

High · published June 27, 2019

CVSS v3.0
8.0
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02009 · 80.7th percentile
Published
2019-06-27T20:39Z
EPSS history
Timeline
  • 27 JUN 20:39Z
    Command Injection could allow authenticated users to execute arbitrary code
    cvelistv5