Lucene search

[email protected]CVE-2019-1192

HistoryAug 14, 2019 - 9:15 p.m.

CVE-2019-1192

2019-08-1421:15:00

CWE-863

[email protected]

web.nvd.nist.gov

cve-2019-1192

microsoft

browsers

security

feature

bypass

vulnerability

nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.5%

JSON

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka ‘Microsoft Browsers Security Feature Bypass Vulnerability’.

VendorProductVersionCPE
microsoftinternet_explorer_11Windows 7 for 32-bit Systems Service Pack 1cpe:2.3:a:microsoft:internet_explorer_11:Windows 7 for 32-bit Systems Service Pack 1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 7 for x64-based Systems Service Pack 1cpe:2.3:a:microsoft:internet_explorer_11:Windows 7 for x64-based Systems Service Pack 1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows Server 2008 R2 for x64-based Systems Service Pack 1cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2008 R2 for x64-based Systems Service Pack 1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 8.1 for 32-bit systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 8.1 for 32-bit systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 8.1 for x64-based systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 8.1 for x64-based systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows Server 2012 R2cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2012 R2:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows RT 8.1cpe:2.3:a:microsoft:internet_explorer_11:Windows RT 8.1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 10 for 32-bit Systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 10 for 32-bit Systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 10 for x64-based Systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 10 for x64-based Systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows Server 2016cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2016:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	internet_explorer_11	Windows 7 for 32-bit Systems Service Pack 1	cpe:2.3:a:microsoft:internet_explorer_11:Windows 7 for 32-bit Systems Service Pack 1:::::::*
microsoft	internet_explorer_11	Windows 7 for x64-based Systems Service Pack 1	cpe:2.3:a:microsoft:internet_explorer_11:Windows 7 for x64-based Systems Service Pack 1:::::::*
microsoft	internet_explorer_11	Windows Server 2008 R2 for x64-based Systems Service Pack 1	cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2008 R2 for x64-based Systems Service Pack 1:::::::*
microsoft	internet_explorer_11	Windows 8.1 for 32-bit systems	cpe:2.3:a:microsoft:internet_explorer_11:Windows 8.1 for 32-bit systems:::::::*
microsoft	internet_explorer_11	Windows 8.1 for x64-based systems	cpe:2.3:a:microsoft:internet_explorer_11:Windows 8.1 for x64-based systems:::::::*
microsoft	internet_explorer_11	Windows Server 2012 R2	cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2012 R2:::::::*
microsoft	internet_explorer_11	Windows RT 8.1	cpe:2.3:a:microsoft:internet_explorer_11:Windows RT 8.1:::::::*
microsoft	internet_explorer_11	Windows 10 for 32-bit Systems	cpe:2.3:a:microsoft:internet_explorer_11:Windows 10 for 32-bit Systems:::::::*
microsoft	internet_explorer_11	Windows 10 for x64-based Systems	cpe:2.3:a:microsoft:internet_explorer_11:Windows 10 for x64-based Systems:::::::*
microsoft	internet_explorer_11	Windows Server 2016	cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2016:::::::*