CVE-2018-12295
UnknownEPSS 1.14%
Last modified
CVE-2018-12295 is a vulnerability of currently unknown severity. SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter.. EPSS estimates a 1.14% chance of exploitation in the next 30 days.
Description
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Seagate | Nas Os | 4.3.15.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-12295?
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter.
How severe is CVE-2018-12295?
Severity scoring for CVE-2018-12295 is pending analysis. The EPSS model estimates a 1.14% probability of exploitation in the next 30 days.
How do I fix CVE-2018-12295?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-1229Pivotal Spring Batch Admin, all versions, contains a stored …
- CVE-2018-12290The Yii2-StateMachine extension v2.x.x for Yii2 has XSS.
- CVE-2018-12291The on_get_missing_events function in handlers/federation.py…
- CVE-2018-12292A use-after-free vulnerability exists in DOMProxyHandler::En…
- CVE-2018-12293The getImageData function in the ImageBufferCairo class in W…
- CVE-2018-12294WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in W…
- CVE-2018-12296Insufficient access control in /api/external/7.0/system.Syst…
- CVE-2018-12297Cross-site scripting in API error pages in Seagate NAS OS ve…
- CVE-2018-12298Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.…
- CVE-2018-12299Cross-site scripting in filebrowser in Seagate NAS OS versio…
- CVE-2018-1230Pivotal Spring Batch Admin, all versions, does not contain c…
- CVE-2018-12300Arbitrary Redirect in echo-server.html in Seagate NAS OS ver…
Are you affected by CVE-2018-12295?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST