Vulnerability Details CVE-2013-3520
                VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.819
                        
                    
                    
                        
                            EPSS Ranking 99.2%
                        
                    
                 
                
                    CVSS Severity
                    
                    
                        
                            CVSS v2 Score 7.5
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2013-3520
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:1.5.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:1.6.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:1.6.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:1.6.2
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:2.0.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:2.0.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:vmware:vcenter_chargeback_manager:2.5.0