CVE-2019-19614: Halvotec Raquest

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed in Release 10.24.11206.1.

Affected products

• Halvotec Raquest: version 10.23.10801.0 only

Published 2020-03-09. Last modified 2026-06-17.