CVE-2019-19677EUVD-2019-928718.03.2020, 23:15arxes-tolina 3.0.0 allows User Enumeration.EnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary4.3 MEDIUMNETWORKLOWLOWCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NBase ScoreCVSS 3.xEPSS ScorePercentile: 53%Affected Products (NVD)VendorProductVersionarxes-tolinaarxes-tolina3.0.0𝑥= Vulnerable software versionsKnown Exploits!https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.htmlhttps://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.htmlCommon Weakness EnumerationCWE-200 - Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Referenceshttps://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.htmlhttps://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.html