peter bassill · operator
$ cve CVE-2023-28614 JSON

CVE-2023-28614

9.8
CRITICAL · CVSS 3.1 · EPSS 2.9% (pctl 87)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.9% — more likely to be exploited than 87% of all CVEs
WeaknessCWE-78
On CISA KEVno
Public exploitnone known
Published2023-09-15
Last modified2026-06-17

Affected (1)

VendorProduct
freewillsolutionssmart trade

References

→ the Explorer  ·  watch your stack  ·  NVD