TI-2019-07047 CVE-2019-9632 · GHSA-j8x4-532w-f4xqESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName…Priority MEDIUM 60ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.39019 · Published 2019-03-08 · No fix listed