CVE-2019-1231: Microsoft Project Rome

Medium severity, CVSS 5.9. EPSS: 2.3% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'.

Affected products

• Microsoft Project Rome: version 1.4.1 only

Published 2019-09-11. Last modified 2026-06-17.