CVE-2019-19317: netapp cloud_backup
Vulnerability summary
CVE-2019-19317 is a critical (CVSS 9.8) vulnerability in netapp cloud_backup. EPSS estimates a 4.67% chance of exploitation in the next 30 days, higher than 91.7% of scored vulnerabilities.
Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 5% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 4Timeline
- 05-12-2019PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.67%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
Increase +0.39 pp
From 4.28% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Netapp2 products
Oracle1 product
- mysql_workbench≤ 8.0.19
Siemens1 product
Sqlite1 product
- sqlite3.30.1
4 vendors · 5 products
References
7 links- github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3X Refsource MISCPatchThird Party Advisory
- github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8X Refsource MISCPatchThird Party Advisory