CVE-2019-16303

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

3.67% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 88.7% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-09-13 23:43Z6 YR AGO

Last updated

2024-08-05 01:10Z2 YR AGO

Reserved

2019-09-13

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Base

Data version

5.1

Document digest

acc275a9bdeb919579f35380d21aabc5a4edf37d773a4d89f15d83162df45566

• github.comhttps://github.com/jhipster/generator-jhipster/security/advisories/GHSA-mwp6-j9wf-968cx_refsource_MISC
• github.comhttps://github.com/jhipster/generator-jhipster/issues/10401x_refsource_MISC
• github.comhttps://github.com/jhipster/generator-jhipster/commit/88448b85fd3e8e49df103f0061359037c2c68ea7x_refsource_MISC
• github.comhttps://github.com/jhipster/jhipster-kotlin/issues/183x_refsource_MISC
• www.jhipster.techhttps://www.jhipster.tech/2019/09/13/jhipster-release-6.3.0.htmlx_refsource_MISC
• lists.apache.org[commons-issues] 20200918 [jira] [Created] (LANG-1607) To aid with CVE-2019-16303, consider upgrading RandomStringUtils default RNGhttps://lists.apache.org/thread.html/r6d243e7e3f25daeb242dacf3def411fba32a9388d3ff84918cb28ddd%40%3Cissues.commons.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[commons-issues] 20200919 [jira] [Commented] (LANG-1607) To aid with CVE-2019-16303, consider upgrading RandomStringUtils default RNGhttps://lists.apache.org/thread.html/rc87fa35a48b5d70b06af6fb81785ed82e82686eb83307aae6d250dc9%40%3Cissues.commons.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[commons-issues] 20200921 [jira] [Commented] (LANG-1607) To aid with CVE-2019-16303, consider upgrading RandomStringUtils default RNGhttps://lists.apache.org/thread.html/rc3f00f5d3d2ec0e2381a3b9096d5f5b4d46ec1587ee7e251a3dbb897%40%3Cissues.commons.apache.org%3Emailing-listx_refsource_MLIST