peter bassill · operator
$ cve CVE-2019-3476 JSON

CVE-2019-3476

9.8
CRITICAL · CVSS 3.0 · EPSS 2.9% (pctl 87)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.9% — more likely to be exploited than 87% of all CVEs
On CISA KEVno
Public exploitnone known
Published2019-03-25
Last modified2026-06-17

Affected (1)

VendorProduct
microfocusdata protector

References

→ the Explorer  ·  watch your stack  ·  NVD