CVE-2025-63911

Katalog CVE

CVSS 7.2 · High EPSS 2,4%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada cohesity tranzman. Skor CVSS 3.1 7.2 (High) menurut mitre.org.

Deskripsi (NVD)

Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.

Rincian

Terbit di NVD

3 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/GregDurys/8b7a3022c04b6cee8c1e1af04f5671b2 exploit · advisory pihak ketiga
• https://github.com/GregDurys/Cohesity-TranZman-CVEs advisory pihak ketiga