CVE-2019-9958

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-06-24 · updated 2026-06-17
Weakness: CWE-352

Description

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests.

Affected products

Quadbase Espressreport Enterprise Server: 7.0-update_7

References

https://crawl3r.xyz/cve/cve-2019-9958/
https://crawl3r.xyz/cve/cve-2019-9958/

Get alerted when CVE-2019-9958 or the next vulnerability affects your stack