CVE-2019-6544

MEDIUM Year: 2019
CVSS v3 Score
5.6
Medium
CVSS v2 Score
6.8
Medium
Weakness Type
CWE-284
View all →

Vulnerability Description

GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.

Related Vulnerabilities

CVE-2015-1985

MEDIUM
CVSS:5.6(Medium)

The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.

CWE-2842015

CVE-2016-0339

MEDIUM
CVSS:5.6(Medium)

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to sp...

CWE-2842016

CVE-2016-4811

MEDIUM
CVSS:5.6(Medium)

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified ...

CWE-2842016

CVE-2016-5598

MEDIUM
CVSS:5.6(Medium)

Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via ve...

CWE-2842016

CVE-2025-25683

MEDIUM
CVSS:5.6(Medium)

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1.

CWE-2842025

CVE-2025-30698

MEDIUM
CVSS:5.6(Medium)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441...

CWE-2842025