3 matches found
CVE-2026-51947: Deserialization of Untrusted Data
An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip fixed in Pivotal CRM 6.6.5.10 and PatchCWE50220260316.zip allows a remote attacker to execute arbitrary code via the Pivotal.Engine.Client.Services.Conversion.dll component. NOTE: this issue exists because of ...
9.8CVSS6.6AI score0.01074EPSS
SaveExploits0References2
CVE-2026-39253: Deserialization of Untrusted Data
An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components...
8.1CVSS6.5AI score0.00721EPSS
SaveExploits0References2
20