Vulnerability Details CVE-2019-17087
Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 60.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-17087
-
cpe:2.3:a:microfocus:acutoweb:-