TI-2018-03763 CVE-2018-5204 · GHSA-p56h-v253-6p88Unrestricted file upload in Infraware ML ReportPriority MEDIUM 47ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0234 · Published 2018-12-28 · No fix listed CWE-434