{"api_version":"1","generated_at":"2026-07-23T06:44:43+00:00","cve":"CVE-2018-10587","urls":{"html":"https://cve.report/CVE-2018-10587","api":"https://cve.report/api/cve/CVE-2018-10587.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-10587","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-10587"},"summary":{"title":"CVE-2018-10587","description":"NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2018-11-01 17:29:00","updated_at":"2018-12-12 20:21:00"},"problem_types":["CWE-78"],"metrics":[],"references":[{"url":"https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004","name":"https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004","refsource":"MISC","tags":["Third Party Advisory"],"title":"wizlynx group | Remote Command Execution Vulnerabilities in NetGain EM","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10587","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10587","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"10587","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netgain-systems","cpe5":"enterprise_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"free","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"10587","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netgain-systems","cpe5":"enterprise_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"free","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2018-10587","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004","refsource":"MISC","url":"https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004"}]}},"nvd":{"publishedDate":"2018-11-01 17:29:00","lastModifiedDate":"2018-12-12 20:21:00","problem_types":["CWE-78"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9},"severity":"HIGH","exploitabilityScore":8,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:netgain-systems:enterprise_manager:*:*:*:*:free:*:*:*","versionEndExcluding":"10.0.57","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"10587","Ordinal":"127028","Title":"CVE-2018-10587","CVE":"CVE-2018-10587","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"10587","Ordinal":"1","NoteData":"NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"10587","Ordinal":"2","NoteData":"2018-11-01","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"10587","Ordinal":"3","NoteData":"2018-11-01","Type":"Other","Title":"Modified"}]}}}