CVE-2015-2962

CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
cgi_rescueblobee
𝑥
≤ 1.12
cgi_rescueblobee
0.20
cgi_rescueblobee
0.21
cgi_rescueblobee
1.00
cgi_rescueblobee
1.01
cgi_rescueblobee
1.02
cgi_rescueblobee
1.03
cgi_rescueblobee
1.04
cgi_rescueblobee
1.05
cgi_rescueblobee
1.10
cgi_rescueblobee
1.11
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN24336273/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087
http://www.securityfocus.com/bid/75183
http://jvn.jp/en/jp/JVN24336273/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087
http://www.securityfocus.com/bid/75183