CVE-2019-17087

—

CVSS 3.1

7.5 high

EPSS

1%p63

Published

Dec 11, 2019 (Dec 11, 2019)

Modified

Jun 17, 2026

Description

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.

Vendors: microfocus
Products: acutoweb
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.