Skip to content
OpenAdvisories

Vendor

Open Mainframe Project

7 known vulnerabilities.

Products

Zowe 6 Zowe CLI - Imperative 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2021-4326

    Imperative Local Command Injection allows Activity Masking

    A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.

    Open Mainframe Project Zowe @zowe/imperative npm