CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2019-10974
Medium (5.5) in nrel energyplus. EPSS 0.3% chance of exploitation in the next 30 days.
NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-121
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nrel:energyplus