What’s Vulnerable › Vulnerabilities

CVE-2019-17087

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-11 · updated 2026-06-17

Description

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.

Affected products

• Micro Focus International AcuToWeb: before 10.3 — fixed in 10.3

How to fix

Upgrade to a fixed version: Micro Focus International AcuToWeb 10.3. Check the vendor advisory for mitigations.

References

• https://softwaresupport.softwaregrp.com/doc/KM03569662
• https://softwaresupport.softwaregrp.com/doc/KM03569662

Get alerted when CVE-2019-17087 or the next vulnerability affects your stack