Critical severity9.9NVD Advisory· Published Oct 28, 2022· Updated Jun 17, 2026
CVE-2022-37425
CVE-2022-37425
Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.
Affected products
3cpe:2.3:a:opennebula:opennebula:*:*:*:*:enterprise:*:*:*+ 2 more
- cpe:2.3:a:opennebula:opennebula:*:*:*:*:enterprise:*:*:*range: <6.4.2
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
1- opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.