Starwindsoftware Command Center — known CVE vulnerabilities

Every CVE whose affected-product data names Starwindsoftware Command Center, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-23858 — CVSS 8.8 (high): A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system…
• CVE-2021-4034 — CVSS 7.8 (high) — actively exploited: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow…
• CVE-2020-25704 — CVSS 5.5 (medium): A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local…
• CVE-2019-20807 — CVSS 5.3 (medium): In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g…