CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute arbitrary commands via a crafted request. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Code Injection
RCE
Xcom Data Transport
NVD
CVSS 2.0
10.0
EPSS
2.2%