High severity8.8NVD Advisory· Published Jun 24, 2019· Updated Jun 17, 2026

CVE-2019-9958

Description

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests.

Affected products

Quadbase/EspressReport ESdescription
Quadbase/EspressReport ESllm-fuzzy
Range: 7.0 update 7

Patches

Vulnerability mechanics

References

crawl3r.xyz/cve/cve-2019-9958/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000