Lucene search

K
cvelistMitreCVELIST:CVE-2012-5357
HistoryOct 30, 2017 - 2:00 p.m.

CVE-2012-5357

2017-10-3014:00:00
mitre
www.cve.org
4

AI Score

9.8

Confidence

High

EPSS

0.966

Percentile

99.7%

Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.

AI Score

9.8

Confidence

High

EPSS

0.966

Percentile

99.7%