VULNERABILITY INTELLIGENCE

CVE-2010-3719

CVSS score8.5 HIGH
EPSS probability12.96%
CISA KEVNot currently listed
Published2011-02-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C

Description

Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references