CVE-2019-9616

7.2 highEPSS 2.7%

High (7.2) in ofcms project ofcms. EPSS 2.7% chance of exploitation in the next 30 days.

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadScrawl URI.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-706
Published: 2019-03-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ofcms_project:ofcms

References

https://www.seebug.org/vuldb/ssvid-97833
https://www.seebug.org/vuldb/ssvid-97833

Check your stack JSON