CVE-2017-2098

EPSS 2.5%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Apr 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.

Affected products

CubeCart Limited · CubeCart

References

http://jvn.jp/en/jp/JVN81618356/index.html https://forums.cubecart.com/topic/52088-cubecart-614-released/http://www.securityfocus.com/bid/95866