Lucene search

K
cvelistMitreCVELIST:CVE-2021-36356
HistoryAug 31, 2021 - 3:45 a.m.

CVE-2021-36356

2021-08-3103:45:11
mitre
www.cve.org

10 High

AI Score

Confidence

High

0.881 High

EPSS

Percentile

98.7%

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for CVE-2019-17124.

10 High

AI Score

Confidence

High

0.881 High

EPSS

Percentile

98.7%