What’s Vulnerable › Vulnerabilities

CVE-2019-5916

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-02-13 · updated 2026-06-17
• Weakness: CWE-917

Description

Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earlier, Ver 2.4 Patch 13 and earlier, Ver 2.5 Patch 12 and earlier, Ver 2.6 Patch 8 and earlier, Ver 2.7 Patch 6 and earlier, Ver 2.7 Government Edition Patch 7 and earlier, Ver 2.8 Patch 6 and earlier, Ver 2.8c Patch 5 and earlier, Ver 2.9 Patch 4 and earlier) allows remote attackers to execute EL expression on the server via unspecified vectors.

Affected products

• D-CIRCLE inc. POWER EGG: 2.0.1, 2.0.2-patch3, 2.1-patch4, 2.2-patch7, 2.3-patch9, 2.4-patch13 (+7)

References

• http://jvn.jp/en/jp/JVN63860183/index.html
• https://poweregg.d-circle.com/support/package/important/20190204_000780/
• http://jvn.jp/en/jp/JVN63860183/index.html
• https://poweregg.d-circle.com/support/package/important/20190204_000780/

Get alerted when CVE-2019-5916 or the next vulnerability affects your stack