Summary
generated automatically from NVD dataVMware vCenter Chargeback Manager (CBM) contains a code injection flaw (CWE-94) caused by improper handling of uploads. Remote attackers could exploit it through unspecified vectors to execute arbitrary code. The NVD description says versions before 2.5.1 are affected, and the issue carries a CVSS v2.0 score of 7.5 (HIGH) with network access, low complexity, and no authentication required.
NVD description
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
EPSS · FIRST.org
55.6%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-18, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 17 juin 2013
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
References (2)
Similar CVEs
Other vulnerabilities of type CWE-94
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.