CVE-2018-18941

9.8 criticalEPSS 2.3%

Critical (9.8) in vignette content management. EPSS 2.3% chance of exploitation in the next 30 days.

In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is discontinued.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-01-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vignette:content_management

References

http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.html
http://seclists.org/fulldisclosure/2018/Nov/32
http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.html
http://seclists.org/fulldisclosure/2018/Nov/32

Check your stack JSON