Critical severity9.8NVD Advisory· Published Nov 8, 2019· Updated Jun 17, 2026

CVE-2019-18623

Description

Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.

Affected products

EnergyCAP/EnergyCAPllm-fuzzy
Range: <=7.5.6

Patches

Vulnerability mechanics

References

energycap.freshdesk.com/helpdesk/attachments/31016649523nvdVendor Advisory
energycap.freshdesk.com/support/solutions/articles/31000152837-2019-october-24-security-incident-notification-issue-with-public-dashboards-found-and-resolvednvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000