TI-2018-15384 CVE-2018-25159 · GHSA-mwjq-j75q-p7vm
Epross AVCON6 OGNL Remote Code Execution via login.action
Priority HIGH 81
Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expres…