evolved_programmable_network_manager 漏洞

严重CVE-2021-442282021/12/10

Vmware Workspace One Log4j RCE

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Fedora CISCO-Data-Center-Network-Manager CISCO-UCS-Director

CVSS10.0EPSS 94.4%

严重CVE-2019-18212019/05/16

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.

evolved_programmable_network_managerPoC 已收录

CVSS9.8EPSS 93.3%

evolved_programmable_network_manager

关联漏洞

Vmware Workspace One Log4j RCE

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution