VULNERABILITY INTELLIGENCE

CVE-2019-17325

CVSS score6.5 MEDIUM
EPSS probability1.25%
CISA KEVNot currently listed
Published2019-10-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Weakness classification

  • vuln@krcert.or.kr: CWE-434
  • nvd@nist.gov: CWE-434

Primary references