Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-16645
HistorySep 20, 2019 - 7:15 p.m.

CVE-2019-16645

2019-09-2019:15:11
CWE-94
[email protected]
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

9

Confidence

High

EPSS

0.012

Percentile

85.5%

JSON

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack.

Affected configurations

Nvd
Node
embedthisgoaheadMatch2.5.0
VendorProductVersionCPE
embedthisgoahead2.5.0cpe:2.3:a:embedthis:goahead:2.5.0:*:*:*:*:*:*:*

Related

packetstorm 1
zdt 1
cve 1
openvas 1
exploitdb 1
prion 1
cvelist 1
ics 1
packetstorm
packetstorm
GoAhead 2.5.0 Host Header Injection
2019-09-30 00:00:00
zdt
zdt
GoAhead 2.5.0 - Host Header Injection Vulnerability
2019-09-30 00:00:00
cve
cve
CVE-2019-16645
2019-09-20 19:15:11
openvas
openvas
GoAhead Server HTTP Header Injection Vulnerability
2019-09-23 00:00:00
exploitdb
exploitdb
GoAhead 2.5.0 - Host Header Injection
2019-09-30 00:00:00
prion
prion
Design/Logic Flaw
2019-09-20 19:15:00
cvelist
cvelist
CVE-2019-16645
2019-09-20 18:24:15
ics
ics
Hitachi Energy MSM
2023-05-09 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

9

Confidence

High

EPSS

0.012

Percentile

85.5%

JSON
Related for NVD:CVE-2019-16645
packetstorm1zdt1cve1openvas1exploitdb1prion1cvelist1ics1