CVE-2019-3947

9.8 criticalEPSS 1.6%

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2019-06-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fujielectric:v-server

References

http://www.securityfocus.com/bid/108740
https://www.tenable.com/security/research/tra-2019-27
http://www.securityfocus.com/bid/108740
https://www.tenable.com/security/research/tra-2019-27

Check your stack JSON