cbcvebase.

Epross Avcon6 Systems Management Platform vulnerabilities

1 known vulnerability affecting epross/avcon6_systems_management_platform.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-25159P2CRITICALCVSS 9.8v*2026-03-11
CVE-2018-25159 [CRITICAL] CWE-1334 CVE-2018-25159: Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) inject Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OGNL payloads in the redirect parameter to instanti
nvd
Epross Avcon6 Systems Management Platform vulnerabilities | cvebase