{"metadata": {"vulnerability": "cve-2019-9875", "count": 62, "kinds": {"milestone": 4, "sighting": 33, "kev": 11, "other": 14}}, "data": [{"timestamp": "2019-03-19T00:00:00Z", "date_only": false, "value": "2019-03-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2019-9875", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-05-31T21:29:00Z", "date_only": false, "value": "2019-05-31T21:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7GVQ-J6PG-875G", "record": "GHSA-7GVQ-J6PG-875G", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-05-31T21:29:00Z", "date_only": false, "value": "2019-05-31T21:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-9875", "record": "GSD-2019-9875", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-05-31T21:29:06.187Z", "date_only": false, "value": "2019-05-31T21:29:06.187", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-9875", "record": "FKIE_CVE-2019-9875", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-06-03T16:32:00Z", "date_only": false, "value": "2019-06-03T16:32Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-9875", "record": "GSD-2019-9875", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-24T16:46:56Z", "date_only": false, "value": "2022-05-24T16:46:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7GVQ-J6PG-875G", "record": "GHSA-7GVQ-J6PG-875G", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-13T01:23:47.019Z", "date_only": false, "value": "2023-12-13T01:23:47.019284Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-9875", "record": "GSD-2019-9875", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T22:01:55.175Z", "date_only": false, "value": "2024-08-04T22:01:55.175Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2019-9875", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-9875", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0cb28347-d6a0-43f2-bfa7-50df601b2842", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": true, "value": "2025-03-26", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2019-9875", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-9875", "field": "evidence.0.details.added_date", "uuid": "0cb28347-d6a0-43f2-bfa7-50df601b2842", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": true, "value": "2025-03-26", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "evidence.0.details.date_added", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-9875", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0cb28347-d6a0-43f2-bfa7-50df601b2842", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "status.status_updated_at", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-9875", "field": "status.status_updated_at", "uuid": "0cb28347-d6a0-43f2-bfa7-50df601b2842", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "cve-2019-9875", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2019-9875 added to CISA KEV"}, {"timestamp": "2025-03-26T18:45:15.573Z", "date_only": false, "value": "2025-03-26T18:45:15.573738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "e567845c-2bd2-442d-a63e-1230ca6e7634", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v"}, {"timestamp": "2025-03-26T19:05:08.721Z", "date_only": false, "value": "2025-03-26T19:05:08.721711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "8eea04a9-8970-42c8-a83c-f6895799c1c8", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u"}, {"timestamp": "2025-03-26T20:22:05.444Z", "date_only": false, "value": "2025-03-26T20:22:05.444145Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2019-9875", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-26T20:22:05.444Z", "date_only": false, "value": "2025-03-26T20:22:05.444145Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-9875", "record": "FKIE_CVE-2019-9875", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-26T21:39:21.455Z", "date_only": false, "value": "2025-03-26T21:39:21.455640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llcqprf46s2m", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "d5e86686-3e07-4e33-988e-3c3344a1a8cb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llcqprf46s2m"}, {"timestamp": "2025-03-26T21:40:45.937Z", "date_only": false, "value": "2025-03-26T21:40:45.937666Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3llcqscwrtk24", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "cabfd0cf-9e2d-4f69-965f-447291b25b85", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3llcqscwrtk24"}, {"timestamp": "2025-03-26T22:25:30Z", "date_only": false, "value": "2025-03-26T22:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8993", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "d7870723-f652-4375-948e-f77fb6cad604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2019-9875\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.\n\ud83d\udccf Published: 2019-05-31T20:34:46.000Z\n\ud83d\udccf Modified: 2025-03-26T22:20:22.860Z\n\ud83d\udd17 References:\n1. https://dev.sitecore.net/Downloads.aspx\n2. https://www.synacktiv.com/blog.html\n3. https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf", "url": "https://t.me/DarkWebInformer_CVEAlerts/8993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-27T03:21:57.750Z", "date_only": false, "value": "2025-03-27T03:21:57.750699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llddug4zvs24", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "c1024321-6725-4b03-bd02-b03f912fba0d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llddug4zvs24"}, {"timestamp": "2025-03-27T06:23:07.628Z", "date_only": false, "value": "2025-03-27T06:23:07.628234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldnydutzx2r", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "47c254b8-49a0-47ec-9501-e1c1ecd7f0c0", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldnydutzx2r"}, {"timestamp": "2025-03-27T18:04:37.758Z", "date_only": false, "value": "2025-03-27T18:04:37.758980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llev6nnik22q", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "9a9798f2-4570-4baa-8262-495413086b71", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3llev6nnik22q"}, {"timestamp": "2025-03-27T18:20:31.562Z", "date_only": false, "value": "2025-03-27T18:20:31.562230Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llew35zjy22c", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "9bbdc3c3-068f-4578-ad01-17b660f251f9", "url": "https://bsky.app/profile/aakl.bsky.social/post/3llew35zjy22c"}, {"timestamp": "2025-03-27T18:20:32.562Z", "date_only": false, "value": "2025-03-27T18:20:32.562600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llew35zjy32c", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "a2c30e78-96d2-40d6-b78b-055a64dcbca5", "url": "https://bsky.app/profile/aakl.bsky.social/post/3llew35zjy32c"}, {"timestamp": "2025-03-27T21:02:03.769Z", "date_only": false, "value": "2025-03-27T21:02:03.769914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zebas2s", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "02abc3c5-8404-45f3-b725-09162cd06e28", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zebas2s"}, {"timestamp": "2025-03-28T01:49:03.536Z", "date_only": false, "value": "2025-03-28T01:49:03.536119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/harmonic-osc.bsky.social/post/3llfp55wnq22m", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "64e14e5b-ed07-47d1-b621-5841a4f35c2b", "url": "https://bsky.app/profile/harmonic-osc.bsky.social/post/3llfp55wnq22m"}, {"timestamp": "2025-03-28T08:24:45.781Z", "date_only": false, "value": "2025-03-28T08:24:45.781547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgf5bjbymc2", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "c8f090a9-45df-4d2b-8767-44d834276095", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgf5bjbymc2"}, {"timestamp": "2025-03-28T09:21:00.994Z", "date_only": false, "value": "2025-03-28T09:21:00.994269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgiekpb6hc2", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "8bb5850f-aa77-4a80-8318-422fa3b12ee6", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgiekpb6hc2"}, {"timestamp": "2025-03-28T10:40:14.756Z", "date_only": false, "value": "2025-03-28T10:40:14.756207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgmskxjnzb2", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "f0871a5b-8a93-4525-8afd-39462cdc47c3", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgmskxjnzb2"}, {"timestamp": "2025-03-28T16:21:03Z", "date_only": false, "value": "2025-03-28T16:21:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/8265", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "946b06db-15c0-4bbc-aef5-c9d6086ad80c", "content": "CISA Flags Two Six-Year-Old Sitecore Flaws Amid Active Exploitation Evidence\n\nCISA adds Sitecore flaws CVE-2019-9874 and CVE-2019-9875 to KEV amid active exploitation and agency patch mandates.\n\nThe Hacker News | thehackernews.com \u2022 Mar 27, 2025", "url": "https://t.me/ton618cyber/8265", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-28T16:21:04Z", "date_only": false, "value": "2025-03-28T16:21:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/3291", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "b4b095d6-056f-42a2-ab3a-e0513c010f5d", "content": "CISA Flags Two Six-Year-Old Sitecore Flaws Amid Active Exploitation Evidence\n\nCISA adds Sitecore flaws CVE-2019-9874 and CVE-2019-9875 to KEV amid active exploitation and agency patch mandates.\n\nThe Hacker News | thehackernews.com \u2022 Mar 27, 2025", "url": "https://t.me/ton618cyber/3291", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-29T23:18:58.578Z", "date_only": false, "value": "2025-03-29T23:18:58.578596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkhomli3c2b", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "0656afee-59e1-4a96-8ddf-136c56994d22", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkhomli3c2b"}, {"timestamp": "2025-03-31T14:33:42.697Z", "date_only": false, "value": "2025-03-31T14:33:42.697345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llola7qaum22", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "1f565b7e-c956-46c9-8f3f-8ccde46a140d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llola7qaum22"}, {"timestamp": "2025-04-01T08:16:10.319Z", "date_only": false, "value": "2025-04-01T08:16:10.319028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqgmezaza42", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "3290c81a-9aa8-4df7-8887-6d7d97b7637f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqgmezaza42"}, {"timestamp": "2025-04-01T08:56:38.622Z", "date_only": false, "value": "2025-04-01T08:56:38.622778Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqiv35oy562", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "36ddf6e9-8a0d-44e9-929d-a24df3c3051a", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqiv35oy562"}, {"timestamp": "2025-04-01T09:22:23.978Z", "date_only": false, "value": "2025-04-01T09:22:23.978917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqkdf42gok2", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "c6ec2249-10ee-4275-8a57-879a60693b65", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqkdf42gok2"}, {"timestamp": "2025-04-01T10:44:12.785Z", "date_only": false, "value": "2025-04-01T10:44:12.785455Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqotkv7hlk2", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "2103d2b4-8cf9-4dbe-9154-ec38304fa0ed", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqotkv7hlk2"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": true, "value": "2025-04-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "evidence.0.details.due_date", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T01:30:11.577Z", "date_only": false, "value": "2025-05-19T01:30:11.577570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lpigde3cat2g", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "8c0d222f-5db1-41fb-bcfb-9b9bb8bc02f9", "url": "https://bsky.app/profile/bolhasec.com/post/3lpigde3cat2g"}, {"timestamp": "2025-08-10T18:27:45Z", "date_only": false, "value": "2025-08-10T18:27:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "ac5c1b34-df71-4d15-aef5-46b5210cf4d7"}, {"timestamp": "2025-09-10T07:48:00Z", "date_only": false, "value": "2025-09-10T07:48:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "f0419503-7436-4efe-a0c0-e61cd7cd1baa"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "de7dbdcf-378e-416f-afbe-6834b0fed1e9"}, {"timestamp": "2025-09-29T03:12:13Z", "date_only": false, "value": "2025-09-29T03:12:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "fdf1aaaf-864c-4423-8b23-a476a2f29205"}, {"timestamp": "2025-10-21T23:45:35.858Z", "date_only": false, "value": "2025-10-21T23:45:35.858Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:35.858Z", "date_only": false, "value": "2025-10-21T23:45:35.858Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2019-9875", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:41Z", "date_only": false, "value": "2025-10-22T00:31:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7GVQ-J6PG-875G", "record": "GHSA-7GVQ-J6PG-875G", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:04.774Z", "date_only": false, "value": "2026-02-02T12:26:04.774893Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26422a97-6f1c-402f-bd72-c6d168d9da31", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "f73d3b5a-d032-4082-bafd-6e39c5fa228f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26422a97-6f1c-402f-bd72-c6d168d9da31", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:26:04.774Z", "date_only": false, "value": "2026-02-02T12:26:04.774893Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26422a97-6f1c-402f-bd72-c6d168d9da31", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "67c2a82b-d296-4587-8f0b-8466dd40738b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26422a97-6f1c-402f-bd72-c6d168d9da31", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T02:44:46.273Z", "date_only": false, "value": "2026-06-17T02:44:46.273", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-9875", "record": "FKIE_CVE-2019-9875", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:23.715Z", "date_only": false, "value": "2026-06-19T12:46:23.715180Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/434e7193-8904-4df3-858f-ca56e2b9d7b6", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "50065d69-80bc-4e30-a084-0479baa5bd99", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/434e7193-8904-4df3-858f-ca56e2b9d7b6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-9875", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "0cb28347-d6a0-43f2-bfa7-50df601b2842", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:35.465Z", "date_only": false, "value": "2026-06-23T11:14:35.465044Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0cb28347-d6a0-43f2-bfa7-50df601b2842", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "656a62bf-24d4-4495-a04c-d8183b7c99b7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0cb28347-d6a0-43f2-bfa7-50df601b2842", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:06:07.745Z", "date_only": false, "value": "2026-06-23T14:06:07.745956Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d461328f-d99c-437b-ac1f-1e7f04205fad", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "bf1b528f-f91b-4ef8-a628-f14a857714a5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d461328f-d99c-437b-ac1f-1e7f04205fad", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-11T10:15:51.974Z", "anchors": {"origin": {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-26T22:25:30Z", "date_only": false, "value": "2025-03-26T22:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8993", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "d7870723-f652-4375-948e-f77fb6cad604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2019-9875\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.\n\ud83d\udccf Published: 2019-05-31T20:34:46.000Z\n\ud83d\udccf Modified: 2025-03-26T22:20:22.860Z\n\ud83d\udd17 References:\n1. https://dev.sitecore.net/Downloads.aspx\n2. https://www.synacktiv.com/blog.html\n3. https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf", "url": "https://t.me/DarkWebInformer_CVEAlerts/8993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 183612314.0, "hours": 51003.42055555555, "days": 2125.142523148148, "min_seconds": 183612314.0, "max_seconds": 183698714.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 183612314.0, "hours": 51003.42055555555, "days": 2125.142523148148, "min_seconds": 183612314.0, "max_seconds": 183698714.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 183693044.0, "hours": 51025.845555555556, "days": 2126.0768981481483, "min_seconds": 183693044.0, "max_seconds": 183693044.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-26T22:25:30Z", "date_only": false, "value": "2025-03-26T22:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8993", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "d7870723-f652-4375-948e-f77fb6cad604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2019-9875\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.\n\ud83d\udccf Published: 2019-05-31T20:34:46.000Z\n\ud83d\udccf Modified: 2025-03-26T22:20:22.860Z\n\ud83d\udd17 References:\n1. https://dev.sitecore.net/Downloads.aspx\n2. https://www.synacktiv.com/blog.html\n3. https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf", "url": "https://t.me/DarkWebInformer_CVEAlerts/8993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 235057265.974807, "hours": 65293.684993001945, "days": 2720.5702080417477, "min_seconds": 235057265.974807, "max_seconds": 235057265.974807, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-31T20:34:46Z", "date_only": false, "value": "2019-05-31T20:34:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-9875", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T10:15:51.974Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 51444951.974807, "hours": 14290.264437446389, "days": 595.4276848935996, "min_seconds": 51358551.974807, "max_seconds": 51444951.974807, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-9875", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ba595725-7aa8-40e3-a56f-c8850a70f4bc", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T10:15:51.974Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 51364221.974807, "hours": 14267.83943744639, "days": 594.4933098935995, "min_seconds": 51364221.974807, "max_seconds": 51364221.974807, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-26T22:25:30Z", "date_only": false, "value": "2025-03-26T22:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8993", "record": "CVE-2019-9875", "field": "creation_timestamp", "uuid": "d7870723-f652-4375-948e-f77fb6cad604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2019-9875\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.\n\ud83d\udccf Published: 2019-05-31T20:34:46.000Z\n\ud83d\udccf Modified: 2025-03-26T22:20:22.860Z\n\ud83d\udd17 References:\n1. https://dev.sitecore.net/Downloads.aspx\n2. https://www.synacktiv.com/blog.html\n3. https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf", "url": "https://t.me/DarkWebInformer_CVEAlerts/8993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T10:15:51.974Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}