Vulnerability Details CVE-2016-8588
The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the file name of an uploaded file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.4%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 6.0
References
Products affected by CVE-2016-8588
-
cpe:2.3:a:trendmicro:threat_discovery_appliance:2.6.1062