CVE-2019-19370 in MiCollab App情報

要約

〜によって MITRE

A cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel MiCollab application before 9.0.15 for Android could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the file upload interface. A successful exploit could allow an attacker to execute arbitrary scripts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2019年11月27日

モデレーション

承諾済み

エントリ

VDB-150804

CPE

準備完了

CWE

CWE-79 (確認済み)

CVSS

6.1 (NVD)

EPSS

0.01042

KEV

いいえ

アクティビティ

非常低い

セクター

Homeoffice, Police

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2019-19370
NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-19370
CVE Details	https://www.cvedetails.com/cve/CVE-2019-19370/

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!