CVE-2020-11490

7.2 highEPSS 1.9%

High (7.2) in zevenet zen load balancer. EPSS 1.9% chance of exploitation in the next 30 days.

Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi cert_issuer, cert_division, cert_organization, cert_locality, cert_state, cert_country, or cert_email parameter.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zevenet:zen_load_balancer

References

http://code610.blogspot.com/2020/03/pentesting-zen-load-balancer-quick.html
https://github.com/c610/tmp/blob/master/zenload4patreons.zip
http://code610.blogspot.com/2020/03/pentesting-zen-load-balancer-quick.html
https://github.com/c610/tmp/blob/master/zenload4patreons.zip

Check your stack JSON