CVE-2019-17323

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-30 · updated 2026-06-17
Weakness: CWE-91

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected products

ClipSoft REXPERT: through 1.0.0.527

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184

Get alerted when CVE-2019-17323 or the next vulnerability affects your stack