CVE-2019-12193

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 19, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-121954.8TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and goiCVE-2019-121969.8A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers toCVE-2019-121987.5In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.CVE-2019-12204.3A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific UCVE-2019-122036.3SilverStripe through 4.3.3 allows session fixation in the "change password" form.CVE-2019-122049.8In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.CVE-2019-122056.1SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS.CVE-2019-122069.8njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c.CVE-2019-122079.8njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.CVE-2019-122089.8njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c.CVE-2019-122097.5Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabCVE-2019-12217.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip
CVE-2019-12193: Critical severity, CVSS 9.8 | Vulnix