CVE-2019-19160

MEDIUM

Reportexpress ProPlus < 3.0.0.62 - Remote Code Execution via VBScript in Configure File

Title source: llm

Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp).

Core 2

Core References

Vendor Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 5.7

EPSS 0.0058

EPSS Percentile 43.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-353 CWE-345

Status published

Products (1)

cabsoftware/reportexpress_proplus < 3.0.0.62

Published Jun 29, 2020

Tracked Since Feb 18, 2026