Lucene search
Veracode Vulnerability DatabaseVERACODE:40065HistoryApr 06, 2023 - 3:06 p.m.
Command Injection
2023-04-0615:06:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
apache uima ducc
command injection
vulnerability
distributed uima cluster computing
arbitrary commands
0.001 Low
EPSS
Percentile
43.7%
Apache UIMA DUCC is vulnerable to Command Injection. The vulnerability exists when using Distributed UIMA Cluster Computing module which allows an attacker to inject and execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uima-ducc-parent | le | 3.0.0 | |
| uima-ducc-parent | le | 3.0.0 |
Related
cnvd
cnvd
Apache UIMA DUCC Command Injection Vulnerability
2023-04-03 00:00:00
cve
cve
CVE-2023-28935
2023-03-30 10:15:07
osv
osv
Apache UIMA DUCC allows remote code execution
2023-03-30 12:30:15
nvd
nvd
CVE-2023-28935
2023-03-30 10:15:07
github
github
Apache UIMA DUCC allows remote code execution
2023-03-30 12:30:15
prion
prion
Command injection
2023-03-30 10:15:00
cvelist
cvelist
CVE-2023-28935 Apache UIMA DUCC: DUCC (EOL) allows RCE
2023-03-30 09:10:11