[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2VWi-gkw12RuTI6xOhm0uhtaG-bHwNPdWHduyD8exLo":3,"g5a-risk:CVE-2019-18780":191},{"success":4,"data":5,"meta":189},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":70,"references":71,"referencesCount":87,"weaknesses":88,"weaknessesCount":97,"isActivelyExploited":98,"cisaInfo":27,"otxData":27,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":173,"notableEvents":174},"CVE-2019-18780","What is CVE-2019-18780?","An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. These Veritas products are affected: Access 7.4.2 and earlier, Access Appliance 7.4.2 and earlier, Flex Appliance 1.2 and earlier, InfoScale 7.3.1 and earlier, InfoScale between 7.4.0 and 7.4.1, Veritas Cluster Server (VCS) 6.2.1 and earlier on Linux\u002FUNIX, Veritas Cluster Server (VCS) 6.1 and earlier on Windows, Storage Foundation HA (SFHA) 6.2.1 and earlier on Linux\u002FUNIX, and Storage Foundation HA (SFHA) 6.1 and earlier on Windows.","An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitr...","2019-11-05T20:15:11.203","2020-08-24T17:37:01.14",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.06138,[37,37,37,37,37,37,37],"Critical",[41,46,49,52,55,58,61,66],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"veritas","access","*","cpe:2.3:a:veritas:access:*:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":44,"criteria":48,"vulnerable":4},"access_appliance","cpe:2.3:a:veritas:access_appliance:*:*:*:*:*:*:*:*",{"vendor":42,"product":50,"version":44,"criteria":51,"vulnerable":4},"flex_appliance","cpe:2.3:a:veritas:flex_appliance:*:*:*:*:*:*:*:*",{"vendor":42,"product":53,"version":44,"criteria":54,"vulnerable":4},"infoscale","cpe:2.3:a:veritas:infoscale:*:*:*:*:*:*:*:*",{"vendor":42,"product":56,"version":44,"criteria":57,"vulnerable":4},"cluster_server","cpe:2.3:a:veritas:cluster_server:*:*:*:*:*:*:*:*",{"vendor":42,"product":59,"version":44,"criteria":60,"vulnerable":4},"storage_foundation_ha","cpe:2.3:a:veritas:storage_foundation_ha:*:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":64,"criteria":69,"vulnerable":4},"linux","linux_kernel","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",8,[72,78,81,84],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS19-003","Veritas",[76,77],"Patch","Vendor Advisory",{"url":79,"source":74,"tags":80},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS19-004",[76,77],{"url":82,"source":74,"tags":83},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS19-005",[76,77],{"url":85,"source":74,"tags":86},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS19-006",[76,77],4,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-77","Improper Neutralization of Special Elements used in a Command ('Command Injection')","The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","Many protocols and products have their own custom command language. While OS or shell command strings are frequently discovered and targeted, developers may not realize that these other command languages might also be vulnerable to attacks.","Draft","Class","Simple",1,false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2019-18780? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-18780, a critical severity cyber security vulnerability from 2019. An arbitrary command injection vulnerability in the Clu...","CVE-2019-18780, CVE-2019-18780 vulnerability, CVE-2019-18780 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, veritas security, microsoft security, linux security, access vulnerability, access_appliance vulnerability, flex_appliance vulnerability, infoscale vulnerability, cluster_server vulnerability","\u002Fwhat-is\u002Fcve-2019-18780",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-18780","Cybersecurity","CVE-2019-18780, CVE-2019-18780 vulnerability, CVE-2019-18780 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126,146,160],{"Operator":27,"Negate":27,"Nodes":127},[128],{"Operator":129,"Negate":27,"CPEMatch":130},"OR",[131,134,136,139,142],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":133},"7F929286-63B6-4D5A-9CF3-BF7E66201F90","7.4.2",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":133},"488CA659-F66A-43FC-BF89-4B7BECA8E1C8",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":138},"4E22B14D-D236-486C-88A1-A105D4904F76","1.2",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":141},"1BECF4C9-6701-4A85-B3BC-F4D50DE04E2A","7.3.1",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":144,"VersionEndExcluding":27,"VersionEndIncluding":145},"6C10DD22-65A6-4C8A-BB37-C30D41842C7D","7.4.0","7.4.1",{"Operator":147,"Negate":27,"Nodes":148},"AND",[149,156],{"Operator":129,"Negate":27,"CPEMatch":150},[151,154],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":152,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":153},"819C03F1-9596-4012-9722-F2B89202253E","6.1",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":153},"5E54C100-9BF4-4B7F-A2A5-B5671F267C7D",{"Operator":129,"Negate":27,"CPEMatch":157},[158],{"Vulnerable":27,"Criteria":65,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",{"Operator":147,"Negate":27,"Nodes":161},[162,169],{"Operator":129,"Negate":27,"CPEMatch":163},[164,167],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":166},"2EF04E40-59C2-409E-8C39-95D999C3B35A","6.2.1",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":168,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":166},"313F7193-63CE-4A70-BC92-0A393126A0F8",{"Operator":129,"Negate":27,"CPEMatch":170},[171],{"Vulnerable":27,"Criteria":69,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",[],[175,182],{"id":176,"eventType":177,"eventTime":178,"details":179,"label":180,"color":181},"28f01612-4b5e-4ac0-8b7e-815213b2006c","HIGH_EPSS_DELTA","2025-11-19T04:06:34.65661+00:00","Daily EPSS score increased by 0.110 on 2023-12-30","EPSS Score Increased","red",{"id":183,"eventType":184,"eventTime":185,"details":186,"label":187,"color":188},"70576d77-97fa-4a31-b11e-c9072eca6eed","LOW_EPSS_DELTA","2025-11-22T04:06:22.752086+00:00","Daily EPSS score decreased by 0.110 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":190,"version":33},1792265560731,{"score":192,"band":193,"action":194,"scoredAt":195},55,"Medium","Plan remediation","2026-10-16T06:47:12.553394+00:00"]