{
    "id": "CVE-2008-4749",
    "published": "2008-10-27 20:00:04",
    "last_modified": "2026-06-16 22:58:26",
    "cvss_score": "9.3",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "cwe": null,
    "description": "Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via (1) the LogFile property and ClearLogFile method, and (2) the SaveToFile method.",
    "epss_score": "0.03027",
    "epss_percentile": "0.87080",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-08 18:17:08",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "db_soft_lab",
            "product": "vimp_x"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "6828",
            "title": "db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities",
            "date": "2008-10-24",
            "url": "https://www.exploit-db.com/exploits/6828"
        }
    ],
    "refs_list": [
        "http://securityreason.com/securityalert/4509",
        "http://www.securityfocus.com/bid/31907",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/46096",
        "https://www.exploit-db.com/exploits/6828",
        "http://securityreason.com/securityalert/4509",
        "http://www.securityfocus.com/bid/31907",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/46096",
        "https://www.exploit-db.com/exploits/6828"
    ]
}