symantec reporter CVE-2018-12237 is a vulnerability in Symantec Reporter
Published on January 24, 2019

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges.

NVD


Products Associated with CVE-2018-12237

Want to know whenever a new CVE is published for Symantec Reporter? stack.watch will email you.

Symantec Reporter
 

Affected Versions

Symantec Corporation Symantec Reporter Version 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is affected by CVE-2018-12237

Exploit Probability

EPSS
2.44%
Percentile
84.94%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.