CVE-2019-18265

🗓️ 30 Nov 2022 22:58:26Reported by icscertType

Digital Alert Systems’ DASDEC software prior to version 4.1 has XSS vulnerability enabling remote attackers to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2019-18265	1 Dec 202202:30	–	circl
CNNVD	Digital Alert Systems DASDEC EAS 跨站脚本漏洞	23 Nov 202200:00	–	cnnvd
Cvelist	CVE-2019-18265	30 Nov 202222:58	–	cvelist
EUVD	EUVD-2019-8059	7 Oct 202500:30	–	euvd
ICS	Digital Alert Systems DASDEC	22 Nov 202207:00	–	ics
NVD	CVE-2019-18265	30 Nov 202223:15	–	nvd
OSV	CVE-2019-18265	30 Nov 202223:15	–	osv
Prion	Cross site scripting	30 Nov 202223:15	–	prion
Positive Technologies	PT-2022-8170 · Digital Alert Systems · Dasdec	30 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2019-18265	9 Jan 202609:09	–	redhatcve

NVD

Vulners

Node

digitalalertsystems dasdec_ii_firmwareRange<4.1

AND

digitalalertsystems dasdec_iiMatch-

Node

digitalalertsystems one-net_se_firmwareRange<4.1

AND

digitalalertsystems one-net_seMatch-

Node

digitalalertsystems dasdec_i_firmwareRange<4.1

AND

digitalalertsystems dasdec_iMatch-

Node

digitalalertsystems one-net_firmwareRange<4.1

AND

digitalalertsystems one-netMatch-

Node

digitalalertsystems dasdec_iii_firmwareRange<4.1

AND

digitalalertsystems dasdec_iiiMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "DASDEC",
    "vendor": "Digital Alert Systems",
    "versions": [
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
digitalalertsystems	www.digitalalertsystems.com/security-advisory

21 Nov 2024 04:32Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.14.7 - 5.4

EPSS0.0027

SSVC

CWE-79