CVE-2019-14481

5.4 mediumEPSS 0.4%

Medium (5.4) in adremsoft netcrunch. EPSS 0.4% chance of exploitation in the next 30 days.

AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client. Successful exploitation requires a logged-in user to open a malicious page and leads to account takeover.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2020-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adremsoft:netcrunch

References

https://compass-security.com/fileadmin/Research/Advisories/2020-15_CSNC-2019-016_AdRem_NetCrunch_Cross-Site_Request_Forgery_CSRF.txt
https://www.adremsoft.com/support/
https://compass-security.com/fileadmin/Research/Advisories/2020-15_CSNC-2019-016_AdRem_NetCrunch_Cross-Site_Request_Forgery_CSRF.txt
https://www.adremsoft.com/support/

Check your stack JSON