2 matches found
Design/Logic Flaw
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method...
10CVSS8AI score0.05289EPSS
SaveExploits4References3Affected Software1
CVE-2011-2397: Improper Input Validation
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method...
10CVSS6.6AI score0.05289EPSS
SaveExploits4References2
20