2013-11-27

2013-11-28

2013-11-29

All (1) Critical (1) High (1) Medium (1) Low (1)

CVE-2013-5912 CRITICAL POC THREAT Emergency

VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 34.6%.

Code Injection RCE Velocity Analytics Vhayu Analytic Server

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

34.6%

Threat

4.5