VULNERABILITY INTELLIGENCE
CVE-2013-7103
CVSS score9 HIGH
EPSS probability3.88%
CISA KEVNot currently listed
Published2013-12-14
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')