CVE-2018-12468
—CVSS 3.0
7.2 high
EPSS
2%p82
Published
()
Modified
Description
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.
- Vendors
- microfocus
- Products
- groupwise
- Weakness
- CWE-434
- Vector
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.