cvedb.io
CVE-2018-10959
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2019-04-17T15:29:00.377 · Last modified 2026-06-17T01:35:00.860

Summary

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch.

Affected products

beyondtrust — avecto_defendpoint

Does this affect you?

Add your gear to cvedb and we'll alert you only when beyondtrust ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.