Vendors / Code42 Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 7 CVSS 7.0–8.9
Exploited now Code42 records in CISA KEV No Code42 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 32
Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injection.
CVSS 3.1 HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00545 · Published 2019-07-19 · No fix listed CWE-94
Priority LOW 24
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write.
CVSS 3.0 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2019-08-21 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
Critical2 High7 Medium1 Low0 No CVSS0