CRITICAL

CVE-2019-15846

CVSS v3

9.8

CRITICAL

EPSS Score

59.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

Technical details

Published
9/6/2019

Frequently asked questions

What is CVE-2019-15846?

Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

Is CVE-2019-15846 actively exploited?

Active exploitation of CVE-2019-15846 has not been confirmed. The EPSS score is 59.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-15846?

CVE-2019-15846 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2019-15846 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.