Lucene search

CVE-2019-17495

🗓️ 10 Oct 2019 22:10:15Reported by [email protected]Type

CSS injection vulnerability in Swagger UI before 3.23.11 allows CSS-based input field value exfiltration via RPO

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ InstaScan (CVE-2019-17495)	10 Jul 202014:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to CSS injection due to Swagger UI (CVE-2019-17495)	15 Jun 202305:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to an IBM WebSphere Application Server Liberty vulnerability (CVE-2019-17495)	10 May 202017:38	–	ibm
IBM Security Bulletins	Security Bulletin: Swagger Vulnerability in WebSphere Application Server Liberty shipped with Cloud Pak System (CVE-2019-17495)	7 Jul 202013:14	–	ibm
IBM Security Bulletins	Security Bulletin: Novalink is impacted by Swagger vulnerability affects WebSphere Application Server Liberty	27 Jul 202019:39	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ (CVE-2019-17495)	11 Jul 202013:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2019-17495)	19 Mar 202019:26	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Swagger UI (CVE-2019-17495)	30 Dec 201916:34	–	ibm
IBM Security Bulletins	Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to information disclosure due to Springfox Swagger (CVE-2019-17495)	30 May 202415:24	–	ibm
IBM Security Bulletins	Security Bulletin: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495)	20 Jan 202018:11	–	ibm

Nvd

Node

smartbear swagger_uiRange<3.23.11

Node

oracle banking_apisRange18.1–18.3

oracle banking_apisMatch19.1

oracle banking_apisMatch19.2

oracle banking_apisMatch20.1

oracle banking_apisMatch21.1

oracle banking_digital_experienceRange18.1–18.3

oracle banking_digital_experienceMatch19.1

oracle banking_digital_experienceMatch19.2

oracle banking_digital_experienceMatch20.1

oracle banking_digital_experienceMatch21.1

oracle banking_platformRange2.4.0–2.10.0

oracle primavera_gatewayRange16.2.0–16.2.11

oracle primavera_gatewayRange17.12.0–17.12.8

oracle utilities_frameworkMatch4.3.0.6.0

oracle utilities_frameworkMatch4.4.0.0.0

oracle utilities_frameworkMatch4.4.0.2.0

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r84b327f7a8b6b28857b906c07a66dd98e1d341191fa8d7816514ef96%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r853ffeb915a400f899de78124d4e0d77a19379d2e11bf8f4e98c624f%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/ref70b940c4f69560d29d6ba792d6c82865e74de3dcad4c92d99b1f8f%40%3Ccommits.airflow.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
github	www.github.com/tarantula-team/CSS-injection-in-Swagger-UI
oracle	www.oracle.com/security-alerts/cpujan2022.html
lists	www.lists.apache.org/thread.html/r3acb7e494cf1aab99b6784b7c5bbddfd0d4f8a484ab534c3a61ef9cf%40%3Ccommits.airflow.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Oct 2019 22:15Current

9.5High risk

Vulners AI Score9.5

CVSS27.5

CVSS39.8

EPSS0.022

CWE-352