CVE-2019-9632

PoC —

CVSS 3.0

7.5 high

EPSS

40%p99

Published

Mar 8, 2019 (Mar 8, 2019)

Modified

Jun 17, 2026

Description

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.

Vendors: esafenet
Products: electronic document security management system
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (39.9%)

In the news0 stories

No ingested article mentions this CVE yet.