CVE-2019-16179

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-16187.8A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated,CVE-2019-161805.3Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method iCVE-2019-161812.7In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.CVE-2019-161826.1A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitraryCVE-2019-161832.7In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions.CVE-2019-161849.8A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey resCVE-2019-161857.2In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.CVE-2019-161867.2In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.CVE-2019-161877.5Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-sCVE-2019-161887.1HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can CVE-2019-16199.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attCVE-2019-161909.8SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authent
CVE-2019-16179: Medium severity, CVSS 5.3 | Vulnix