CVE-2019-15569

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 26, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-155709.8BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.CVE-2019-155719.8The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php.CVE-2019-155729.8Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.CVE-2019-155739.8Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.CVE-2019-155749.8Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.CVE-2019-155757.5A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API throughCVE-2019-155767.5An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private syCVE-2019-155774.3An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed project milestones to be disclCVE-2019-155785.3An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The patCVE-2019-155795.3An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where thCVE-2019-155806.5An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, CVE-2019-155815.3An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project own
CVE-2019-15569: Critical severity, CVSS 9.8 | Vulnix