CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Description
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88
CVEs mapped to this weakness (6,529)
page 108 of 327| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-11181 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46). | ||
| CVE-2018-11180 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46). | ||
| CVE-2018-11179 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46). | ||
| CVE-2018-11178 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46). | ||
| CVE-2018-11177 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46). | ||
| CVE-2018-11176 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46). | ||
| CVE-2018-11175 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46). | ||
| CVE-2018-11174 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46). | ||
| CVE-2018-11173 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46). | ||
| CVE-2018-11172 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46). | ||
| CVE-2018-11171 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46). | ||
| CVE-2018-11170 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46). | ||
| CVE-2018-11169 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46). | ||
| CVE-2018-11168 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46). | ||
| CVE-2018-11167 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46). | ||
| CVE-2018-11166 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46). | ||
| CVE-2018-11165 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46). | ||
| CVE-2018-11164 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46). | ||
| CVE-2018-11162 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46). | ||
| CVE-2018-11161 | Hig | 0.58 | 8.8 | 0.05 | Jun 2, 2018 | Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46). |
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
- risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).