CVE Intelligence

BMC Software Compuware iStrobe Web vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting BMC Software Compuware iStrobe Web: 1 record(s), with affected versions and fixes.

CVE-2024-58298 Critical · 9.2 CWE-434 Dec 11, 2025
Compuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File Upload
Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the 'fileName' parameter to upload a web shell and execute arbitrary commands by sending POST requests to the uploaded JSP endpoint.