CVSS v3
7.2
HIGH
EPSS Score
81.2%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
Active exploitation of CVE-2020-14295 has not been confirmed. The EPSS score is 81.2%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2020-14295 has a CVSS v3 base score of 7.2 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).