How severe is CVE-2012-4361?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.7 out of 10.

What type of vulnerability is CVE-2012-4361?

This is classified as CWE-78, which is a common weakness in software security.

CVE-2012-4361

HIGH Year: 2012

CVSS v2 Score

7.7

High

Weakness Type

CWE-78

View all →

Vulnerability Description

lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.

CVE-2015-7426

CRITICAL

CVSS:10.0(Critical)

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 an...

CWE-782015

CVE-2016-10043

CRITICAL

CVSS:10.0(Critical)

An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use ...

CWE-782016

CVE-2019-19897

CRITICAL

CVSS:10.0(Critical)

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT A...

CWE-782019

CVE-2019-4202

CRITICAL

CVSS:10.0(Critical)

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to t...

CWE-782019

CVE-2019-5127

CRITICAL

CVSS:10.0(Critical)

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Enco...

CWE-782019