CVE-2019-18956

CVE-2019-18956 describes a critical remote code execution vulnerability in Divisa Proxia Suite, SparkSpace, and Proxia PHR products. This flaw stems from insecure deserialization of the "proxia-error" cookie, allowing an unauthenticated attacker to craft a malicious serialized payload. The vulnerability has a CVSS score of 9.8 (Critical), indicating it can be exploited over the network with low complexity, leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high EPSS score suggests a non-trivial probability of exploitation.