CVE-2025-47228

medium · 6.7

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.

6.7

CVSS

17.2%

EPSS (exploit prob.)

97th

EPSS percentile

2025-07-05

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Weaknesses

CWE-78

References

https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228
https://www.scriptcase.net/changelog/
https://www.synacktiv.com/advisories/scriptcase-pre-authenticated-remote-command-execution
https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-47228