VulnerabilityModified
CVE-2010-4099
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.
MEDIUM 6.8EPSS 2.63%
Does this matter?
Lower severity and a low EPSS score (2.63%). Track it; it rarely justifies an emergency change on its own.
Description
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.63% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- nitrosecurity/nitroview esm software
- Source
- cve@mitre.org
References
- http://www.exploit-db.com/exploits/15318Exploit
- http://www.securityfocus.com/bid/44421Exploit
- http://www.securitytracker.com/id?1024639
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62768
- http://www.exploit-db.com/exploits/15318Exploit
- http://www.securityfocus.com/bid/44421Exploit
- http://www.securitytracker.com/id?1024639
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62768
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.