CVE-2024-48863: License Center
7.7
CVSS
Description
A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.
We have already fixed the vulnerability in the following version:
License Center 1.9.43 and later
Classification
CVE ID: CVE-2024-48863
CVSS Base Severity: HIGH
CVSS Base Score: 7.7
Affected Products
Vendor: QNAP Systems Inc.
Product: License Center
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)