CVE-2019-10267: ahsay cloud_backup_suite

EPSS trend

Probability

75.17%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 75.17% on 28-09-2026

28-09-202628-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

6 found

referenceUnverified
Exploit Reference (wbsec.nl)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown

Show all 6 exploits

exploit-databasejspUnverified
Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)
Maturity: poc
exploit-databasejspVerified
Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated)
Maturity: poc
MetasploitremoteVerified
Ahsay Backup v7.x-v8.1.1.50 (authenticated) file upload
exploit/windows/misc/ahsay_backup_fileupload
Maturity: weaponized

References

3 links

www.wbsec.nl/ahsay/X Refsource MISCExploitThird Party Advisory
packetstormsecurity.com/files/153771/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/153770/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry

Related vulnerabilities

PrioritiseCVE-2020-5846ahsay · cloud_backup_suite6y agoahsay cloud_backup_suiteAn insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-encode-path HTTP header, and the content in the HTTP request body. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full system access as the configured user (e.g., Administrator) when starting from any authenticated session (e.g., a trial account). This is fixed in the 83/830122/cbs-*-hotfix-task26000 builds.CVSS8.8HighEPSS1.40%PrioritiseCVE-2022-37027ahsay · cloud_backup_suite4y agoahsay cloud_backup_suiteAhsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacker can enable JMX services and consequently achieve remote code execution as the system user.CVSS7.2HighEPSS22.21%PrioritiseCVE-2019-10265ahsay · cloud_backup_suite7y agoahsay cloud_backup_suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the directory in the JavaScript code. If changed to (for example) "C:" then one can browse the whole server.CVSS7.8HighEPSS2.50%RoutineCVE-2019-10263ahsay · cloud_backup_suite7y agoahsay cloud_backup_suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial account, it is possible to inject XSS in the Alias field, allowing the attacker to retrieve the admin's cookie and take over the account.CVSS6.1MediumEPSS0.83%PrioritiseCVE-2019-10264ahsay · cloud_backup_suite7y agoahsay cloud_backup_suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Import Users option. This option accepts a ZIP archive containing a users.xml file that can trigger XXE.CVSS7.2HighEPSS1.33%PrioritiseCVE-2019-10266ahsay · cloud_backup_suite7y agoahsay cloud_backup_suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to read the file structure and even the content of files without authentication.CVSS7.8HighEPSS13.30%

All vulnerabilities incloud_backup_suite

CVE-2019-10267: ahsay cloud_backup_suite

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References