cbcvebase.

Zenoss Inc Zenoss Core vulnerabilities

1 known vulnerability affecting zenoss_inc/zenoss_core.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2012-10048P2HIGHCVSS 8.7PoCv3.02025-08-08
CVE-2012-10048 [HIGH] CWE-22 CVE-2012-10048: Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen() call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on the server as the zenoss user.
nvd
Zenoss Inc Zenoss Core vulnerabilities | cvebase