CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is…

published March 8, 2019

CVSS
—
EPSS
40%
Percentile
98.6
In the wild
Unconfirmed
What it is

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.39885 · 98.6th percentile
Published
2019-03-08T06:00Z
EPSS history
Timeline
  • 22 SEP 03:18Z
    EPSS moved 40% → 24%
    epss
  • 06 SEP 03:13Z
    EPSS moved 40% → 24%
    epss
  • 30 AUG 16:02Z
    EPSS moved 24% → 40%
    epss
  • 29 AUG 04:57Z
    EPSS moved 40% → 24%
    epss
  • 08 MAR 06:00Z
    ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is…
    cvelistv5