cve.bz

CVE-2010-4345

7.8 highKEVEPSS 18%

High (7.8) in Exim Exim. In CISA KEV since 2022-03-25. EPSS 18% chance of exploitation in the next 30 days.

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2022-03-25, due 2022-04-15
CWE
CWE-77
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON