6.8
CVSSv2

CVE-2019-9958

Published: 24/06/2019 Updated: 14/02/2024
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote malicious users to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

quadbase espressreport enterprise server 7.0