Vulnerability Details : CVE-2015-0889
KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.
Vulnerability category: Execute code
Products affected by CVE-2015-0889
- cpe:2.3:a:kent-web:joyful_note:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-0889
4.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 92 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-0889
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2015-0889
-
http://jvn.jp/en/jp/JVN88862608/index.html
JVN#88862608: Joyful Note vulnerability in handling filesVendor Advisory
-
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000024
JVNDB-2015-000024 - JVN iPedia - 脆弱性対策情報データベースVendor Advisory
-
http://www.kent-web.com/bbs/joyful.html
Vendor Advisory
Jump to