A vulnerability described as critical has been identified in ACL Analytics up to 13.0.0.579 . Affected is the function EXECUTE of the component Powershell Script Handler . Such manipulation leads to code injection. This vulnerability is listed as CVE-2018-25320 . The attack may be performed from remote. In addition, an exploit is available.