When was CVE-2018-8974 made public?

CVE-2018-8974 was made public on April 26, 2018: that is the date its CVE record's CNA, MITRE Corporation, gives for when the vulnerability was made public. The CVE record itself was published on April 26, 2018. EchelonGraph's copy of the record carries a last-modified date of November 21, 2024; the record at its source may have been updated since.

Is CVE-2018-8974 actively exploited?

CVE-2018-8974 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 4.0% probability of exploitation in the next 30 days (90th percentile of EPSS-scored CVEs).

What is the CVSS score of CVE-2018-8974?

CVE-2018-8974 has a CVSS v3 base score of 7.8 (NVD).

How do I remediate CVE-2018-8974?

A fix for CVE-2018-8974 is available: update to the fixed version the vendor names in its advisory.

CVE-2018-8974

HIGHNVD 7.87.8Trending — 3 sources updated this week

Also known asEUVD-2018-20581 (ENISA EUVD) · GHSA-99f9-wfq6-74gm (GitHub Security Advisories)Source: ENISA EUVD

7.8EG

EchelonGraph verdictPlan a fixRemediate within your standard update timelines (the SSVC decision on this page).

High severity, but no confirmed exploitation yet

CISA-KEV: Not listedEPSS PROB: 4.0%CVSS: 7.8Exploit: None knownExposed services: Not assessed

A fix is available — apply it.

Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source