Vendor
Epross
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
Epross AVCON6 OGNL Remote Code Execution via login.action
Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted reque…