CVE-2010-3895

CVE-2010-3895 describes a local privilege escalation vulnerability in IBM OmniFind Enterprise Edition versions prior to 9.1. An attacker can exploit this by specifying an arbitrary command name as the first argument to the esRunCommand function. This flaw carries a CVSS score of 7.2, indicating high severity due to its local attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.