Vulnerability Details CVE-2019-9632
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.591
EPSS Ranking 98.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-9632
-
cpe:2.3:a:esafenet:electronic_document_security_management_system:v3
-
cpe:2.3:a:esafenet:electronic_document_security_management_system:v5