CVE-2019-12581

🗓️ 27 Jun 2019 15:15:09Reported by [email protected]Type

Cross-site scripting vulnerability in Zyxel device

Reporter	Title	Published	Views	Family All 10
CNVD	Cross-site scripting vulnerability in multiple Zyxel devices	28 Jun 201900:00	–	cnvd
CVE	CVE-2019-12581	27 Jun 201914:10	–	cve
Cvelist	CVE-2019-12581	27 Jun 201914:10	–	cvelist
KittySploit	Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting Detection	28 Jul 202611:27	–	kittysploit
Nuclei	Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting	23 Oct 202602:07	–	nuclei
osv_cve	CVE-2019-12581	27 Jun 201915:15	–	osv_cve
Prion	Cross site scripting	27 Jun 201915:15	–	prion
Positive Technologies	PT-2019-12870	27 Jun 201900:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-12581: Improper Neutralization of Input During Web Page Generation	27 Jun 201900:00	–	rapid7
RedhatCVE	CVE-2019-12581	7 Jan 202609:29	–	redhatcve

NVD

Node

AND

zyxel uag2100_firmwareRange≤4.18(aaiz.1)c0

zyxel uag2100Match-

Node

AND

zyxel uag4100_firmwareRange≤4.18(aatd.1)c0

zyxel uag4100Match-

Node

AND

zyxel uag5100_firmwareRange≤4.18(aapn.1)c0

zyxel uag5100Match-

Node

AND

zyxel usg110_firmwareRange≤4.30

zyxel usg110Match-

Node

AND

zyxel usg210_firmwareRange≤4.30

zyxel usg210Match-

Node

AND

zyxel usg310_firmwareRange≤4.30

zyxel usg310Match-

Node

AND

zyxel usg1100_firmwareRange≤4.30

zyxel usg1100Match-

Node

AND

zyxel usg1900_firmwareRange≤4.30

zyxel usg1900Match-

Node

AND

zyxel usg2200-vpn_firmwareRange≤4.30

zyxel usg2200-vpnMatch-

Source	Link
n-thumann	www.n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/
zyxel	www.zyxel.com/us/en/
sec-consult	www.sec-consult.com/en/blog/advisories/reflected-cross-site-scripting-in-zxel-zywall/index.html
zyxel	www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml

17 Jun 2026 02:14Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

CVSS 36.1

EPSS0.064

CWE-79