CRITICAL

CVE-2021-46063

CVSS v3

9.1

CRITICAL

EPSS Score

10.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.

Technical details

Published
2/18/2022

Frequently asked questions

What is CVE-2021-46063?

MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.

Is CVE-2021-46063 actively exploited?

Active exploitation of CVE-2021-46063 has not been confirmed. The EPSS score is 10.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-46063?

CVE-2021-46063 has a CVSS v3 base score of 9.1 (CRITICAL severity).

Is CVE-2021-46063 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.