VINCE - The Vulnerability Information and Coordination Environment vulnerabilities
1 known vulnerability in VINCE - The Vulnerability Information and Coordination Environment from CERT/CC. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
VINCE - The Vulnerability Information and…: Deserialization of Untrusted Data
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.