CRITICAL

CVE-2019-12314

CVSS v3

9.8

CRITICAL

EPSS Score

91.5%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.

Technical details

Published
5/24/2019
Exploit-DB
EDB-46931

Frequently asked questions

What is CVE-2019-12314?

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.

Is CVE-2019-12314 actively exploited?

Active exploitation of CVE-2019-12314 has not been confirmed. The EPSS score is 91.5%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-12314?

CVE-2019-12314 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2019-12314 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.