Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3025 State: PUBLISHED Published: 2019-10-16T17:40:59 Last Updated: 2024-10-15T18:44:07.535Z Vendors: Oracle Corporation Products: Hospitality RES 3700 Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality RES 3700. Description: Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficul
ity RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www
N/S:C/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - http://packetstormsecurity.com/files/157746/Oracle-Hospitality-RES-3700-5.7-Remote-Code-Execution.html
CVE ID: CVE-2019-3026 State: PUBLISHED Published: 2019-10-16T17:40:59 Last Updated: 2024-10-01T16:21:01.663Z Vendors: Oracle Corporation Products: VM VirtualBox Problem Types: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp
irtualBox accessible data. Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS V
r complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.zerodayinitiative.com/advisories/ZDI-19-917/ - https://security.gentoo.org/glsa/202004-02 - https://security.gentoo.org/glsa/202101-09
CVE ID: CVE-2019-3027 State: PUBLISHED Published: 2019-10-16T17:40:59 Last Updated: 2024-10-15T18:43:59.571Z Vendors: Oracle Corporation Products: Application Object Library Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. Description: Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable
le E-Business Suite (component: Login Help). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3028 State: PUBLISHED Published: 2019-10-16T17:40:59 Last Updated: 2024-10-15T18:41:54.419Z Vendors: Oracle Corporation Products: VM VirtualBox Problem Types: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2
VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container:
pacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://security.gentoo.org/glsa/202004-02 - https://security.gentoo.org/glsa/202101-09
CVE ID: CVE-2019-3031 State: PUBLISHED Published: 2019-10-16T17:41:00 Last Updated: 2024-10-01T17:38:11.427Z Vendors: Oracle Corporation Products: VM VirtualBox Problem Types: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (com
VirtualBox accessible data. Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS
or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.zerodayinitiative.com/advisories/ZDI-19-918/ - https://security.gentoo.org/glsa/202004-02 - https://security.gentoo.org/glsa/202101-09
CVE ID: CVE-2019-3309 State: REJECTED Published: N/A Last Updated: 2025-01-16T22:21:22.166Z Description: No description available.
CVE ID: CVE-2019-3394 State: PUBLISHED Published: 2019-08-29T14:32:32.947868Z Last Updated: 2024-09-17T00:02:29.665Z Vendors: Atlassian Products: Confluence Server Problem Types: Path Traversal Description: There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under <install-directory>/confluence/WEB-INF directory, which may contain configuration files used for integrating with other services, which could potentially leak credentials or other sensitive information such as LDAP credentials. The LDAP credential will be po
uld potentially leak credentials or other sensitive information such as LDAP credentials. The LDAP credential will be potentially leaked only if the Confluence server is configured to use LDAP as user repository. All versions of Confluence Server from 6.1.0 before 6.6.16 (the fixed version for 6.6.x), from 6.7.0 before 6.13.7 (the fixed version for 6.13.x), and from 6.14.0 before 6.15.8 (the fixed version for 6.15.x) are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONFSERVER-58734 - https://confluence.atlassian.com/x/uAsvOg
CVE ID: CVE-2019-3395 State: PUBLISHED Published: 2019-03-25T18:37:06.217310Z Last Updated: 2024-09-17T00:20:30.157Z Vendors: Atlassian Products: Confluence Server Problem Types: Server-Side Request Forgery (SSRF) Description: The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version 6.9.0 before 6.9.3 (the fixed version for 6.9.x) allows remote attackers to send arbitrary HTTP and WebDAV requests from a Confluence Server or Data Center instance via Server-Side Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://jir
r instance via Server-Side Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONFSERVER-57971
CVE ID: CVE-2019-3396 State: PUBLISHED Published: 2019-03-25T18:37:06.256Z Last Updated: 2025-10-21T23:45:41.385Z Vendors: Atlassian Products: Confluence Server Problem Types: Server-Side Template Injection Description: The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection. Additiona
l and remote code execution on a Confluence Server or Data Center instance via server-side template injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/CONFSERVER-57974 - http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html - http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector - https://www.exploit-db.com/exploits/46731/ - http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html
CVE ID: CVE-2019-3397 State: PUBLISHED Published: 2019-06-03T13:44:05.862975Z Last Updated: 2024-09-16T17:47:59.258Z Vendors: Atlassian Products: Bitbucket Data Center Problem Types: Path Traversal Description: Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 before 5.14.4 (fixed version for 5.14.x), from 5.15.0 before 5.15.3 (fixed version for 5.15.x), from 5.16.0 before 5.16.3 (fixed version for 5.16.x), from 6.0.0 before 6.0.3 (fixed version for 6.0.x), and from 6.1.0 before 6.1.2 (the fixed version for 6.1.x) allow remote attackers who have admin permissions to achieve remote code execution on a Bitb
he fixed version for 6.1.x) allow remote attackers who have admin permissions to achieve remote code execution on a Bitbucket server instance via path traversal through the Data Center migration tool. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-11706
CVE ID: CVE-2019-3398 State: PUBLISHED Published: 2019-04-18T17:21:37.687Z Last Updated: 2025-10-21T23:45:39.283Z Vendors: Atlassian Products: Confluence Problem Types: Path Traversal Description: Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluen
te code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/CONFSERVER-58102 - https://seclists.org/bugtraq/2019/Apr/33 - http://packetstormsecurity.com/files/152616/Confluence-Server-Data-Center-Path-Traversal.
ists.org/bugtraq/2019/Apr/33 - http://packetstormsecurity.com/files/152616/Confluence-Server-Data-Center-Path-Traversal.html - http://www.securityfocus.com/bid/108067 - http://packetstormsecurity.com/files/155235/Atlassian-Confluence-6.15.1-Directory-Traversal.html - http://packetstormsecurity.com/files/155245/Atlassian-Confluence-6.15.1-Directory-Traversal.html
CVE ID: CVE-2019-3399 State: PUBLISHED Published: 2019-04-30T15:28:27.874744Z Last Updated: 2024-09-16T17:48:24.295Z Vendors: Atlassian Products: Jira Problem Types: CWE-863 Description: The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69246
CVE ID: CVE-2019-3400 State: PUBLISHED Published: 2019-05-03T19:26:27.890571Z Last Updated: 2024-09-16T16:54:02.769Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jql parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69245 - http://www.securityfocus.com/bid/108168
CVE ID: CVE-2019-3401 State: PUBLISHED Published: 2019-05-22T17:27:33.449986Z Last Updated: 2024-09-17T04:03:54.061Z Vendors: Atlassian Products: Jira Problem Types: CWE-863 Description: The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69244
CVE ID: CVE-2019-3402 State: PUBLISHED Published: 2019-05-22T17:38:01.853029Z Last Updated: 2024-09-16T18:59:29.908Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69243
CVE ID: CVE-2019-3403 State: PUBLISHED Published: 2019-05-22T17:35:03.958695Z Last Updated: 2024-09-17T01:00:56.714Z Vendors: Atlassian Products: Jira Problem Types: CWE-863 Description: The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69242
CVE ID: CVE-2019-3404 State: PUBLISHED Published: 2020-03-04T13:01:17 Last Updated: 2024-08-04T19:12:09.558Z Vendors: 360 Security Technology, Inc. Products: 360 Router F5C Problem Types: Improper Authentication Description: By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C. Additional Analyst Notes: - CVE Program Container: References: - https://security.360.cn/News/news/id/218.html
CVE ID: CVE-2019-3405 State: PUBLISHED Published: 2021-01-11T15:48:42 Last Updated: 2024-08-04T19:12:08.565Z Vendors: n/a Products: 360F5 Problem Types: DOS Description: In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, which will cause other wireless terminals connected to disconnect from the wireless, so as to attack the router wireless by DoS. At present, the vulnerability has been effectively handled, and users can fix the vulnerability after updating the firmware version. Additional Analyst Notes: - CVE Program Container: References: - https://security.360.cn
updating the firmware version. Additional Analyst Notes: - CVE Program Container: References: - https://security.360.cn/News/news/id/246
CVE ID: CVE-2019-3409 State: PUBLISHED Published: 2019-06-11T18:57:37 Last Updated: 2024-08-04T19:12:08.566Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ZTE Products: ZTE WF820+ LTE Outdoor CPE Problem Types: Command Injection Description: All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate parameter verification, unauthorized users can take advantage of this vulnerability to control the user terminal system. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662
CVE ID: CVE-2019-3410 State: PUBLISHED Published: 2019-06-11T18:59:20 Last Updated: 2024-08-04T19:12:08.564Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: ZTE Products: ZTE WF820+ LTE Outdoor CPE Problem Types: Command Injection Description: All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to send unexpected requests to the server through the affected client. Additional Analyst Notes: - CVE Program Container: Referen
nexpected requests to the server through the affected client. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662
CVE ID: CVE-2019-3411 State: PUBLISHED Published: 2019-06-11T19:19:20 Last Updated: 2024-08-04T19:12:09.354Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ZTE Products: ZTE MF920 Problem Types: Command Injection Description: All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686
CVE ID: CVE-2019-3412 State: PUBLISHED Published: 2019-06-11T19:20:32 Last Updated: 2024-08-04T19:12:09.186Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ZTE Products: ZTE MF920 Problem Types: Command Injection Description: All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686
CVE ID: CVE-2019-3413 State: PUBLISHED Published: 2019-06-11T19:52:50 Last Updated: 2024-08-04T19:12:09.409Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: ZTE Products: NetNumen DAP Problem Types: Command Injection Description: All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010797
CVE ID: CVE-2019-3414 State: PUBLISHED Published: 2019-07-22T18:27:21 Last Updated: 2024-08-04T19:12:09.442Z Vendors: ZTE Products: OTCP Problem Types: Cross-Site Scripting Description: All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to obtain the resources of the specified operation code owned by a user, the malicious script code could be transmitted in the parameter. If the front end does not process the returned result from the interface properly, the malicious script may be executed and the user cookie or other important information may be stolen. Additional Analyst Notes: - CVE Program Con
e executed and the user cookie or other important information may be stolen. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010883
CVE ID: CVE-2019-3415 State: PUBLISHED Published: 2019-07-11T20:50:03 Last Updated: 2024-08-04T19:12:09.394Z Vendors: ZTE Products: MW Problem Types: Other Description: ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011082