CVE-2019-9922

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 29, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-99237.5pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extendCVE-2019-99247.8rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with tCVE-2019-99256.1S-CMS PHP v1.0 has XSS in 4.edu.php via the S_id parameter.CVE-2019-99268.8An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewScCVE-2019-99279.8Caret before 2019-02-22 allows Remote Code Execution.CVE-2019-99288.8GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allCVE-2019-99298.8Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.CVE-2019-99309.8Various Lexmark products have an Integer Overflow.CVE-2019-99317.5Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.CVE-2019-99329.8Various Lexmark products have a Buffer Overflow (issue 2 of 3).CVE-2019-99339.8Various Lexmark products have a Buffer Overflow (issue 3 of 3).CVE-2019-99345.3Various Lexmark products have Incorrect Access Control (issue 1 of 2).
CVE-2019-9922: High severity, CVSS 7.5 | Vulnix