CVE-2019-12581

🗓️ 27 Jun 2019 14:10:08Reported by mitreType

cve🔗 web.nvd.nist.gov👁 105 Views

A reflective XSS vulnerability in Zyxel ZyWall, USG, and UAG devices

Reporter	Title	Published	Views	Family All 9
CNVD	Cross-site scripting vulnerability in multiple Zyxel devices	28 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-12581	27 Jun 201914:10	–	cvelist
Nuclei	Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting	8 Oct 202602:15	–	nuclei
NVD	CVE-2019-12581	27 Jun 201915:15	–	nvd
OSV	CVE-2019-12581	27 Jun 201915:15	–	osv
Prion	Cross site scripting	27 Jun 201915:15	–	prion
Positive Technologies	PT-2019-12870	27 Jun 201900:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-12581: Improper Neutralization of Input During Web Page Generation	27 Jun 201900:00	–	rapid7
RedhatCVE	CVE-2019-12581	7 Jan 202609:29	–	redhatcve

NVD

Node

AND

zyxel uag2100_firmwareRange≤4.18(aaiz.1)c0

zyxel uag2100Match-

Node

AND

zyxel uag4100_firmwareRange≤4.18(aatd.1)c0

zyxel uag4100Match-

Node

AND

zyxel uag5100_firmwareRange≤4.18(aapn.1)c0

zyxel uag5100Match-

Node

AND

zyxel usg110_firmwareRange≤4.30

zyxel usg110Match-

Node

AND

zyxel usg210_firmwareRange≤4.30

zyxel usg210Match-

Node

AND

zyxel usg310_firmwareRange≤4.30

zyxel usg310Match-

Node

AND

zyxel usg1100_firmwareRange≤4.30

zyxel usg1100Match-

Node

AND

zyxel usg1900_firmwareRange≤4.30

zyxel usg1900Match-

Node

AND

zyxel usg2200-vpn_firmwareRange≤4.30

zyxel usg2200-vpnMatch-

Source	Link
zyxel	www.zyxel.com/us/en/
sec-consult	www.sec-consult.com/en/blog/advisories/reflected-cross-site-scripting-in-zxel-zywall/index.html
zyxel	www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml
n-thumann	www.n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/

17 Jun 2026 02:14Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

CVSS 36.1

EPSS0.064

cve-2019-12581 xss vulnerability zyxel zywall usg uag nvd remote attack