CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2019-13057: openldap before 2.4.48 (exclusive); +12 more affected products

CVE-2019-13057. CVSS 3.1 base score 4.9 (MEDIUM, NVD). EPSS 0.03423 (percentile 0.88638), scored 13-Oct-2026.

Affected technology

openldap · before 2.4.48 (exclusive)
openldap

ubuntu linux · 12.04
canonical

ubuntu linux · 14.04
canonical

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

ubuntu linux · 19.04
canonical

debian linux · 8.0
debian

leap · 15.0
opensuse

leap · 15.1
opensuse

mac os x · from 10.13 (inclusive), before 10.13.6 (exclusive)
apple

mac os x · from 10.14 (inclusive), before 10.14.6 (exclusive)
apple

mac os x · from 10.15 (inclusive), before 10.15.2 (exclusive)
apple

mac os x · 10.13.6
apple

mac os x · 10.13.6 · update security_update_2018-002
apple

mac os x · 10.13.6 · update security_update_2018-003
apple

mac os x · 10.13.6 · update security_update_2019-001
apple

mac os x · 10.13.6 · update security_update_2019-002
apple

mac os x · 10.13.6 · update security_update_2019-003
apple

mac os x · 10.13.6 · update security_update_2019-004
apple

mac os x · 10.13.6 · update security_update_2019-005
apple

mac os x · 10.13.6 · update security_update_2019-006
apple

mac os x · 10.14.6
apple

mac os x · 10.14.6 · update security_update_2019-001
apple

policy auditor · before 6.5.1 (exclusive)
mcafee

policy auditor · 6.5.1
mcafee

blockchain platform · before 21.1.2 (exclusive)
oracle

zfs storage appliance kit · 8.8
oracle

solaris · 11
oracle

n/a · n/a
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Description’s affected range: before 2.4.48

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.9/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
20.5 /100 (P4)
CVSS 3.1
4.9 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · NVD
EPSS
0.03423 · percentile 0.88638 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2019-13057.html