CVE-2019-15131: CODE42

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution.

Affected products

• CODE42 CODE42: up to and including 6.7.5; from 6.8.4, up to and including 6.8.8; version 7.0.0 only

Published 2019-09-17. Last modified 2026-06-17.