CVE-2018-11061: dell emc rsa netwitness
Vulnerability summary
CVE-2018-11061 is a critical (CVSS 9.1) vulnerability in dell emc rsa netwitness. EPSS estimates a 4.98% chance of exploitation in the next 30 days, higher than 92.1% of scored vulnerabilities.
Timeline
- 24-08-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.1CriticalCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
4.98%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.98% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Dell emc2 products
- rsa netwitness≥ unspecified, < 11.1.0.2
- rsa security analytics≥ unspecified, < 10.6.6
Emc2 products
- rsa_netwitness< 11.1.0.2
- rsa_security_analytics< 10.6.6
2 vendors · 4 products