VULNERABILITY INTELLIGENCE

CVE-2019-12855

CVSS score7.4 HIGH

EPSS probability1.81%

CISA KEVNot currently listed

Published2019-06-16

Last modified2026-06-17

Description

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.