High (7.2) in alienvault open source security information management. EPSS 2.7% chance of exploitation in the next 30 days.
The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.
Severity
CVSS 3.0
7.2 high
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)