← Back to browse · API

CVE-2019-9884

Severity
CRITICAL
CVSS
9.8
EPSS
0.0296
Risk score
40.24
CISA KEV
No
PoC
No
Published
2019-07-25
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2019-19240, GHSA-V994-GGF7-GPJ5
Products
BroadLearning:eclass ip <2.25.10.2.1
Sources
euvd EUVD-2019-19240

Description

eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.

References