CVE-2019-10974

MEDIUM 5.5CVE-2019-10974 · Published 26/07/2019 · updated 17/06/2026

In short

CVE-2019-10974 is a MEDIUM (CVSS 5.5) vulnerability affecting energyplus (nrel).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
energyplus nrel	`≤ 8.6.0`	No fix yet

Description

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.

References

us-cert.gov/ics/advisories/icsa-19-204-02 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free