{"id":"CVE-2019-10477","aliases":["EUVD-2019-2281","GHSA-rhmm-63jc-m9gx"],"status":"published","title":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles...","description":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01785,"percentile":0.78457,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-19"],"published":"2019-03-29T13:07:23Z","modified":"2026-10-24T10:50:05Z","products":[{"vendor":"fusioninventory","product":"fusioninventory"}],"references":[{"url":"https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.4%2B1.1","tags":["x_refsource_MISC","x_transferred","Product","Third Party Advisory","advisory"]},{"url":"https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.3%2B1.4","tags":["x_refsource_MISC","x_transferred","Product","Third Party Advisory","advisory"]},{"url":"https://github.com/fusioninventory/fusioninventory-for-glpi/commit/0f777f85773b18f5252e79afa1929fcdc4858c3a","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/fusioninventory/fusioninventory-for-glpi/compare/cec774a...baa4158","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/fusioninventory/fusioninventory-for-glpi/compare/260a864...e1f776d","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10477"},{"url":"https://github.com/advisories/GHSA-rhmm-63jc-m9gx"}],"sources":{"cve":[{"id":"CVE-2019-10477","description":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","status":"published","published":"2019-03-29T13:07:23Z","modified":"2024-08-04T22:24:18.441Z","updated_at":"2026-11-02T14:20:19.056416Z"}],"euvd":[{"id":"EUVD-2019-2281","description":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","status":"published","published":"2019-03-29T13:07:23Z","modified":"2024-08-04T22:24:18Z","updated_at":"2026-11-03T02:40:52.601139Z"}],"ghsa":[{"id":"GHSA-rhmm-63jc-m9gx","title":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles...","description":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","status":"published","published":"2022-05-14T01:14:26Z","modified":"2023-02-02T05:03:21Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:51:37.12522Z"}],"nvd":[{"id":"CVE-2019-10477","description":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","status":"published","published":"2019-03-29T14:29:00.53Z","modified":"2026-06-17T02:11:00.923Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-19"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"CVE-2019-10477","description":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","status":"published","published":"2019-03-29T14:29:00.53Z","modified":"2026-10-24T10:50:05.426836448Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:10.383287Z"}]}}