Cyber Resilience

CVE-2012-5357

Ektron Content Management System ≤ 8.02

Public PoCHigh EPSS
Published
30 October 2017
Modified
20 April 2025
Patch / advisory
View advisory
CVSS Score v3 9.8
Click a component to see what it means
Raw vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.68 99.3th percentile
Risk Priority 97 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2012-5357 is a critical-severity an unspecified weakness vulnerability in Ektron Ektron Content Management System. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 0.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.

CWE(s)
CWE-19

Related Threats

CVEs Like This One

CVE-2016-4977Shared CWE-19
CVE-2016-3236Shared CWE-19
CVE-2023-39395Shared CWE-19
CVE-2025-20311Shared CWE-19
CVE-2016-2510Shared CWE-19
CVE-2026-28552Shared CWE-19

Affected Assets

ektron
ektron content management system
≤ 8.02

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References