CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 10:43 p.m.•13 views

CVE-2022-28888

Spryker Commerce OS 1.4.2 allows Remote Command Execution...

9.8CVSS8.6AI score0.04815EPSS

SaveExploits5References1

NVD•added 2022/07/13 6:15 p.m.•32 views

CVE-2022-28888

Spryker Commerce OS 1.4.2 allows Remote Command Execution...

9.8CVSS0.04815EPSS

SaveExploits5References6

CVE•added 2022/07/13 12:00 a.m.•97 views

CVE-2022-28888

CVE-2022-28888 affects Spryker Commerce OS 1.4.2 and specifically the spryker/http module versions below 1.7.0. The root cause is described as a predictable value used to sign/verify special _fragment URLs, enabling an attacker to cause remote command execution in many setups. Advisories state th...

9.8CVSS9.6AI score0.04815EPSS

SaveExploits5References6Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/07/13 12:00 a.m.•6 views

CVE-2022-28888: Improper Neutralization of Special Elements used in an OS Command

Spryker Commerce OS 1.4.2 allows Remote Command Execution...

9.8CVSS8.2AI score0.04815EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by