GCVE-110-CERTCC-2015-316888

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published October 31, 2015

The MobaXterm server prior to verion 8.3 is vulnerable to arbitrary command injection over port 6000 when using default X11 settings.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.5/10

High · AV:N/AC:L/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.9remediation_levelOFreport_confidenceCenvironmental_score4.39536605221744target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-7244

References

MobaXterm server may allow arbitrary command injection due to missing X11 authentication

advisory

MobaXterm server may allow arbitrary command injection due to missing X11 authentication

url

MobaXterm server may allow arbitrary command injection due to missing X11 authentication

url

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON