Vulnerability Details CVE-2018-19646
The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are mishandled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2018-19646
-
cpe:2.3:a:imperva:securesphere:13.0.10
-
cpe:2.3:a:imperva:securesphere:13.1.10
-
cpe:2.3:a:imperva:securesphere:13.2.10