VULNERABILITY INTELLIGENCE
CVE-2025-47228
CVSS score6.7 MEDIUM
EPSS probability23.08%
CISA KEVNot currently listed
Published2025-07-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Description
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.
Weakness classification
- cve@mitre.org: CWE-78