CVE-2019-16179 (limesurvey)

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.
Source: NIST
CVE-2019-16179 (limesurvey)