Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-12440

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2019-12440
  • Sitecore » Rocks » Version: 1.1.0
    cpe:2.3:a:sitecore:rocks:1.1.0
  • Sitecore » Rocks » Version: 1.2.0
    cpe:2.3:a:sitecore:rocks:1.2.0
  • Sitecore » Rocks » Version: 1.2.5
    cpe:2.3:a:sitecore:rocks:1.2.5
  • Sitecore » Rocks » Version: 1.2.6
    cpe:2.3:a:sitecore:rocks:1.2.6
  • Sitecore » Rocks » Version: 1.3.0
    cpe:2.3:a:sitecore:rocks:1.3.0
  • Sitecore » Rocks » Version: 1.3.1
    cpe:2.3:a:sitecore:rocks:1.3.1
  • Sitecore » Rocks » Version: 1.3.5
    cpe:2.3:a:sitecore:rocks:1.3.5
  • Sitecore » Rocks » Version: 1.4.0
    cpe:2.3:a:sitecore:rocks:1.4.0
  • Sitecore » Rocks » Version: 1.5.0
    cpe:2.3:a:sitecore:rocks:1.5.0
  • Sitecore » Rocks » Version: 1.5.1.7
    cpe:2.3:a:sitecore:rocks:1.5.1.7
  • Sitecore » Rocks » Version: 2.0.0-32
    cpe:2.3:a:sitecore:rocks:2.0.0-32
  • Sitecore » Rocks » Version: 2.0.32
    cpe:2.3:a:sitecore:rocks:2.0.32
  • Sitecore » Rocks » Version: 2.0.39
    cpe:2.3:a:sitecore:rocks:2.0.39
  • Sitecore » Rocks » Version: 2.0.54
    cpe:2.3:a:sitecore:rocks:2.0.54
  • Sitecore » Rocks » Version: 2.0.59
    cpe:2.3:a:sitecore:rocks:2.0.59
  • Sitecore » Rocks » Version: 2.1.126
    cpe:2.3:a:sitecore:rocks:2.1.126
  • Sitecore » Rocks » Version: 2.1.130
    cpe:2.3:a:sitecore:rocks:2.1.130
  • Sitecore » Rocks » Version: 2.1.69
    cpe:2.3:a:sitecore:rocks:2.1.69
  • Sitecore » Rocks » Version: 2.1.86
    cpe:2.3:a:sitecore:rocks:2.1.86


Products
Pricing
Contact Us

Shodan ® - All rights reserved