CVE-2025-47228

6.7 mediumEPSS 23%

Medium (6.7). EPSS 23% chance of exploitation in the next 30 days.

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

EPSS: 23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-07-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228
https://www.scriptcase.net/changelog/
https://www.synacktiv.com/advisories/scriptcase-pre-authenticated-remote-command-execution
https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228

Check your stack JSON