SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2019-7727

CRITICAL · CVSS 9.8 EPSS 3.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-04-23 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2019-7727
Severity
CRITICAL
CVSS
9.8
EPSS
3.86%

Original NVD Description

In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol by using the JMX connector. The observed affected TCP port is 6338 but, based on the product's configuration, a different one could be vulnerable.