What’s Vulnerable › Vulnerabilities

CVE-2019-15131

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-09-17 · updated 2026-06-17
• Weakness: CWE-434

Description

In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution.

Affected products

• Code42: through 6.7.5; from 6.8.4 through 6.8.8; 7.0.0

References

• https://code42.com/r/support/CVE-2019-15131
• https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories
• https://code42.com/r/support/CVE-2019-15131
• https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories

Get alerted when CVE-2019-15131 or the next vulnerability affects your stack