Login Request a demo
High severity · published Sep 21, 2022
CVE-2022-37027
Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options
7.2
CVSS
22.2%
EPSS
No
On KEV
Description
Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacker can enable JMX services and consequently achieve remote code execution as the system user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)22.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cloud Backup Suite · Ahsay
9.1.4.0 · source: NVD
Affected product
CB
Cloud Backup Suite
Ahsay
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37027
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37027
Release Notes
https://wiki.ahsay.com/doku.php?id=public:resources:release_notes_v9320
Product
https://www.ahsay.com/jsp/en/downloads/ahsay-downloads_latest-software_ahsaycbs.jsp
Permissions Required
https://www.ahsay.com/partners/en/home/index.jsp?pageContentKey=ahsay_assets_latest_hotfix
Third Party Advisory
https://www.compass-security.com/en/research/advisories
Exploit
https://www.compass-security.com/fileadmin/Research/Advisories/2022_12_CSNC-2022-009_AhsayCBS_Java_Runtime_Parameter_Injection.txt
More from Cloud Backup Suite
10.0
CVE-2026-105134
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
7.3
CVE-2026-105133
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
8.8
CVE-2020-5846
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in…
8.8
CVE-2019-10267
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50
7.5
CVE-2019-10266
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50