Skip to main content

Electronic Document Security Management System

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2019-9632 HIGH POC THREAT This Week

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Electronic Document Security Management System
NVD
CVSS 3.0
7.5
EPSS
39.9%
CVE-2019-9632
EPSS 40% CVSS 7.5
HIGH POC THREAT This Week

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Electronic Document Security Management System
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy