Lucene search

K
cvelistCiscoCVELIST:CVE-2019-1882
HistoryJun 05, 2019 - 12:00 a.m.

CVE-2019-1882 Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability

2019-06-0500:00:00
CWE-79
cisco
www.cve.org
1

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

29.2%

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to conduct XSS attacks.

CNA Affected

[
  {
    "product": "Cisco Industrial Network Director ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "1.5(0.250)"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

29.2%

Related for CVELIST:CVE-2019-1882