CVE-2022-44089

CriticalCVSS 9.8

Published: 10/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.48%

71th percentile - higher than 71% of all known CVEs

Summary

A remote code execution (RCE) vulnerability was discovered in ESPCMS P8.21120101 within the IS_GETCACHE component. Attackers can exploit this flaw to execute arbitrary code on the server.

Risk Assessment

The risk for the organization includes full server compromise, data theft, or system disruption.

Recommendation

It is recommended to immediately update ESPCMS to the latest version and apply available security patches.

Original NVD description (English source)

ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.