CVE-2019-3650 medium Priorität · verfolgen · 26 EPSS 0.009 · 60. Perzentil EPSS 0.9% Wahrscheinlichkeit 0.009 Perzentil 60. Perzentil EPSS · Exploit-Vorhersage — Wahrscheinlichkeit, dass diese CVE in den nächsten 30 Tagen ausgenutzt wird (0–1), sowie ihr Perzentilrang unter allen CVEs EU RU US grimoire priority P3 · Track
0.92% (60th) EPSS
CVSS 4 · medium
4 sources
cnnvd · enisa_euvd · fstec_bdu · nvd
EPSS · bewertet 2026-10-27
Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.
umfeld Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
v2.0 4 medium AV:N/AC:L/Au:S/C:P/I:N/A:N CVSS v2.0 4 medium Access Vector Network Access Complexity Low Authentication Single Confidentiality Impact Partial Integrity Impact None Availability Impact None primary · NVD / NIST US Ausnutzbarkeit 8 · Auswirkung 2.9 v3.1 6.5 medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS v3.1 6.5 medium Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact None Availability Impact None primary · NVD / NIST US Ausnutzbarkeit 2.8 · Auswirkung 3.6 v3.1 5.3 medium AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS v3.1 5.3 medium Access Vector Network Access Complexity Low Integrity Impact None Availability Impact None secondary · FSTEC (BDU) RU v3.1 5.3 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS v3.1 5.3 medium Attack Vector Network Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality Impact Low Integrity Impact None Availability Impact None secondary · ENISA EU v3.1 5.3 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS v3.1 5.3 medium Attack Vector Network Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality Impact Low Integrity Impact None Availability Impact None secondary · trellixpsirt@trellix.com Ausnutzbarkeit 3.9 · Auswirkung 1.4 v3.1 6 medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U CVSS v3.1 6 medium Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact None Availability Impact None secondary · CVSS-BT (t0sche) Weitere Namen und Kennungen dieser Entität.
Externe Belege — Patches, Meldungen, Analysen.
← zurück zur Suche