What’s Vulnerable › Vulnerabilities

CVE-2019-9632

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 39.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-08 · updated 2026-06-17

Description

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.

Affected products

• ESAFENET Electronic Document Security Management System: v3, v5

References

• http://www.iwantacve.cn/index.php/archives/132/
• http://www.iwantacve.cn/index.php/archives/132/

Get alerted when CVE-2019-9632 or the next vulnerability affects your stack