[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpZN-CO8sAt9A6yhVtLmAqFJLncVp_DrxclFttQE3KNw":3,"g5a-risk:CVE-2019-18288":123},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":52,"weaknesses":66,"weaknessesCount":52,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":119,"notableEvents":120},"CVE-2019-18288","What is CVE-2019-18288?","A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003C Service Pack R8.2 SP2). An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.","A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003C Service Pack R8.2 SP2). An attacker with valid authentication at the RMI...","2019-12-12T19:15:15.857","2022-03-25T19:00:39.447",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.04007,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"siemens","sppa-t3000_application_server","*","cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"r8.2","cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*",2,[54,60],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F155665\u002FSiemens-Security-Advisory-SPPA-T3000-Code-Execution.html","Packetstormsecurity",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-451445.pdf","Siemens",[64,65],"Mitigation","Vendor Advisory",[67,75],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",{"id":76,"name":77,"description":78,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2019-18288? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-18288, a high severity cyber security vulnerability from 2019. A vulnerability has been identified in SPPA-T3000 Applicati...","CVE-2019-18288, CVE-2019-18288 vulnerability, CVE-2019-18288 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, siemens security, sppa-t3000_application_server vulnerability","\u002Fwhat-is\u002Fcve-2019-18288",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-18288","Cybersecurity","CVE-2019-18288, CVE-2019-18288 vulnerability, CVE-2019-18288 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":26,"Negate":26,"Nodes":108},[109],{"Operator":110,"Negate":26,"CPEMatch":111},"OR",[112,114,116],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":50,"VersionEndIncluding":26},"5CE233B0-3F20-4FA8-8E26-CCC3E21E49E1",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4EBA7673-3A24-4DF7-9D9C-4B863863083C",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*","D0975E8C-C34F-4BD2-B4CF-41E5FBFD8A12",[],[],{"lastModified":11,"cacheTime":122,"version":32},1792372455370,{"score":124,"band":125,"action":126,"scoredAt":127},49,"Medium","Plan remediation","2026-10-16T06:47:27.479192+00:00"]