CVE-2019-17087

HIGH 7.5CVE-2019-17087 · Published 11/12/2019 · updated 17/06/2026

In short

CVE-2019-17087 is a HIGH (CVSS 7.5) vulnerability affecting acutoweb (microfocus).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.9% of all vulnerabilities.
Fix: update to 10.3 or later.

Package	Affected versions	Patched versions
acutoweb microfocus	`< 10.3`	`10.3`

Description

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.

References

softwaresupport.softwaregrp.com/doc/KM03569662

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free