Medium severity6.5NVD Advisory· Published Oct 23, 2019· Updated Jun 17, 2026
CVE-2019-9597
CVE-2019-9597
Description
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:darktrace:enterprise_immune_system:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:darktrace:enterprise_immune_system:*:*:*:*:*:*:*:*range: <3.1
- (no CPE)range: <3.1
- Darktrace/Enterprise Immune Systemdescription
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/152986/Darktrace-Enterpise-Immune-System-3.0.9-3.0.10-Cross-Site-Request-Forgery.htmlnvdExploitThird Party AdvisoryVDB Entry
- github.com/gerwout/CVE-2019-9596-and-CVE-2019-9597/blob/master/poc.htmlnvdExploitThird Party Advisory
- seclists.org/bugtraq/2019/May/54nvdExploitMailing ListThird Party Advisory
- www.peerlyst.com/posts/exploiting-two-zero-days-in-a-darktrace-appliance-cve-2019-9596-and-cve-2019-9597-gerwout-van-der-veennvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.