CVE-2018-12596
CVSS v3
9.8
CRITICAL
EPSS Score
47.9 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).
Technical details
- Published
- 2018-10-10
- Exploit-DB
- EDB-45577
Frequently asked questions
What is CVE-2018-12596?
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).
Is CVE-2018-12596 actively exploited?
Active exploitation of CVE-2018-12596 has not been confirmed. The EPSS score is 47.9%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2018-12596?
CVE-2018-12596 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2018-12596 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2018 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).