Approved changes feed: RSS · Atom

cpe:2.3:a:nice:engage:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNice (ba6167d6-9c2e-5cb6-8d92-9022d76aa260)
ProductEngage (40685255-3e56-51f2-924c-90dafd0acb06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7727 vulnerable 2026-06-08 05:14:14.686812 Details available
In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol by using the JMX connector. The observed affected TCP port is 6338 but, based on the product's configuration, a different one could be vulnerable.
Published: 2019-04-23T19:07:51.000Z
Updated: 2024-08-04T20:54:28.456Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.