CVE Intelligence

Vulnerabilidades do BMC Software Compuware iStrobe Web

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam BMC Software Compuware iStrobe Web: 1 registro(s), com versões afetadas e correções.

CVE-2024-58298 Crítica · 9.2 CWE-434 11/12/2025
Compuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File Upload
Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the 'fileName' parameter to upload a web shell and execute arbitrary commands by sending POST requests to the uploaded JSP endpoint.