CVE-2019-3709 in IsilonSD Management Server

Tóm tắt

Bởi MITRE

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while registering vCenter servers. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

Once again VulDB remains the best source for vulnerability data.

• chịu trách nhiệm: Dell
• Đặt trước: 03/01/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-133282
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• CVSS: 9.6 (NVD)
• EPSS: 0.00545
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-3709
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-3709
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-3709/