Lucene search
+L

6 matches found

OSV
OSV
•added 2025/12/09 4:17 p.m.•12 views

CVE-2025-13428

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

7.2CVSS5.9AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/09 4:17 p.m.•22 views

CVE-2025-13428

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

8.6CVSS0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 6:28 a.m.•45 views

CVE-2025-13428

CVE-2025-13428 affects the SecOps SOAR server. The vulnerability arises from weak validation of uploaded Python package code in custom integrations, allowing an authenticated user with an IDE role to achieve Remote Code Execution (RCE) via a malicious setup.py during installation. Impact is serve...

8.6CVSS6.1AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/12/09 6:28 a.m.•57 views

CVE-2025-13428 RCE in SecOps SOAR server via user-provided Python packages

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

8.6CVSS0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 6:28 a.m.•11 views

CVE-2025-13428 RCE in SecOps SOAR server via user-provided Python packages

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

8.6CVSS6.1AI score0.00328EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-13428: Improper Input Validation

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

8.6CVSS6.1AI score0.00328EPSS
SaveExploits0References3
Rows per page
Query Builder