Cpanel: >> Cpanel >> 11.38.0.12 Security Vulnerabilities
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).
CVSS Score
7.8
EPSS Score
0.001
Published
2019-08-02
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303).
CVSS Score
5.5
EPSS Score
0.0
Published
2019-08-02
cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).
CVSS Score
6.5
EPSS Score
0.002
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01