7.9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:N/I:C/A:C
5.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
CPE | Name | Operator | Version |
---|---|---|---|
cpanel:cpanel | cpanel | lt | 62.0.39 |
cpanel:cpanel | cpanel | lt | 66.0.35 |
cpanel:cpanel | cpanel | lt | 68.0.27 |
7.9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:N/I:C/A:C
5.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%