CVE-2018-19646

—

CVSS 3.0

9.8 critical

EPSS

3%p88

Published

Nov 28, 2018 (Nov 28, 2018)

Modified

Jun 17, 2026

Description

The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are mishandled.

Vendors: imperva
Products: securesphere
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news0 stories

No ingested article mentions this CVE yet.