CVE-2019-7217

7.5 highEPSS 2.0%

High (7.5) in citrix sharefile. EPSS 2.0% chance of exploitation in the next 30 days.

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2019-05-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

citrix:sharefile

References

http://www.sk-it.com/en/cve.html
http://www.sk-it.com/en/cve.html

Check your stack JSON