CVE-2019-12627

HighCVSS 7.5/10Last modified Aug 11, 2026

Description

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Aug 21, 2019
Last modified: Aug 11, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-126297.2A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary comm CVE-2019-12635.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In CVE-2019-126309.8A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execu CVE-2019-126316.1A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to con CVE-2019-126327.5A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request CVE-2019-126337.5A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access contr CVE-2019-126347.5A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Ci CVE-2019-126354.3A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remo CVE-2019-126368.8A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, rem CVE-2019-126375.4Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote CVE-2019-126385.4A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker CVE-2019-12647.8A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass