CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

CWE-77

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (7,107)

page 116 of 356

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-11179	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
CVE-2018-11178	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
CVE-2018-11177	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
CVE-2018-11176	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
CVE-2018-11175	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
CVE-2018-11174	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
CVE-2018-11173	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
CVE-2018-11172	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
CVE-2018-11171	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
CVE-2018-11170	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
CVE-2018-11169	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
CVE-2018-11168	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
CVE-2018-11167	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
CVE-2018-11166	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
CVE-2018-11165	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
CVE-2018-11164	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
CVE-2018-11162	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
CVE-2018-11161	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
CVE-2018-11160	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
CVE-2018-11159	Quest Disk Backup	Hig	0.58	8.8	0.04	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).

CVE-2018-11179HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
CVE-2018-11178HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
CVE-2018-11177HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
CVE-2018-11176HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
CVE-2018-11175HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
CVE-2018-11174HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
CVE-2018-11173HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
CVE-2018-11172HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
CVE-2018-11171HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
CVE-2018-11170HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
CVE-2018-11169HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
CVE-2018-11168HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
CVE-2018-11167HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
CVE-2018-11166HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
CVE-2018-11165HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
CVE-2018-11164HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
CVE-2018-11162HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
CVE-2018-11161HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
CVE-2018-11160HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
CVE-2018-11159HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.04
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).