Low (3.3). EPSS 0.1% chance of exploitation in the next 30 days.
Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command Centre log files.
This issue affects: Gallagher Command Centre v9.10 prior to vEL9.10.1268 (MR1).
Severity
CVSS 3.1
3.3 low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)