When was CVE-2018-9113 made public?

CVE-2018-9113 was made public on April 26, 2018: that is the date its CVE record's CNA, MITRE Corporation, gives for when the vulnerability was made public. The CVE record itself was published on April 26, 2018. EchelonGraph's copy of the record carries a last-modified date of November 21, 2024; the record at its source may have been updated since.

Is CVE-2018-9113 actively exploited?

CVE-2018-9113 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 4.0% probability of exploitation in the next 30 days (90th percentile of EPSS-scored CVEs).

What is the CVSS score of CVE-2018-9113?

CVE-2018-9113 has a CVSS v3 base score of 7.8 (NVD).

How do I remediate CVE-2018-9113?

A fix for CVE-2018-9113 is available: update to the fixed version the vendor names in its advisory.

CVE-2018-9113

HIGHNVD 7.87.8Trending — 3 sources updated this week

Also known asEUVD-2018-20713 (ENISA EUVD) · GHSA-9j6x-9j4r-7c2j (GitHub Security Advisories)Source: ENISA EUVD

7.8EG

EchelonGraph verdictPlan a fixRemediate within your standard update timelines (the SSVC decision on this page).

High severity, but no confirmed exploitation yet

CISA-KEV: Not listedEPSS PROB: 4.0%CVSS: 7.8Exploit: None knownExposed services: Not assessed

A fix is available — apply it.

Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial '>