CVE-2019-18412

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

JetBrains IDETalk plugin before version 193.4099.10 allows XXE

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Jan 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-184139.8In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via CVE-2019-184148.8Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lacCVE-2019-184156.1Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen.CVE-2019-184166.1Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member.CVE-2019-184178.8Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code executionCVE-2019-184189.8clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no seCVE-2019-184196.1A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web scCVE-2019-18425.4A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to CVE-2019-184206.5An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOP_initialise hypercall.CVE-2019-184217.5An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagCVE-2019-184228.8An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the CVE-2019-184238.8An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall
CVE-2019-18412: High severity, CVSS 7.5 | Vulnix