CVE-2022-44089
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
A remote code execution (RCE) vulnerability was discovered in ESPCMS P8.21120101 within the IS_GETCACHE component. Attackers can exploit this flaw to execute arbitrary code on the server.
Risk Assessment
The risk for the organization includes full server compromise, data theft, or system disruption.
Recommendation
It is recommended to immediately update ESPCMS to the latest version and apply available security patches.
Other vulnerabilities in ESPCMS
See all- CVE-2022-44088Critical
ESPCMS P8.21120101 was found to have a remote code execution (RCE) vulnerability in the INPUT_ISDESCRIPTION component. An attacker can exploit this flaw to execute arbitrary code on the server.
- CVE-2022-44087Critical
ESPCMS P8.21120101 contains a remote code execution (RCE) vulnerability in the UPFILE_PIC_ZOOM_HIGHT component. An attacker can exploit this flaw to execute arbitrary code on the server.
Original NVD description (English source)
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.