CVE-2019-19632

🗓️ 24 Jan 2020 15:15:13Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 10 Views

An unauthenticated attacker can inject stored arbitrary JavaScript in Big Switch Big Monitoring Fabric, Big Cloud Fabric, and Multi-Cloud Director, leading to execution in the content of authenticated administrators

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2019-19632	24 Jan 202014:58	–	cve
Cvelist	CVE-2019-19632	24 Jan 202014:58	–	cvelist
EUVD	EUVD-2019-9243	7 Oct 202500:30	–	euvd
OSV	CVE-2019-19632	24 Jan 202015:15	–	osv
Prion	Design/Logic Flaw	24 Jan 202015:15	–	prion
RedhatCVE	CVE-2019-19632	22 May 202510:09	–	redhatcve

NVD

Node

bigswitch big_cloud_fabricRange4.5–4.5.5

OR

bigswitch big_cloud_fabricRange4.7–4.7.7

OR

bigswitch big_cloud_fabricRange5.0–5.0.1

OR

bigswitch big_cloud_fabricRange5.1–5.1.4

OR

bigswitch big_monitoring_fabricRange6.2–6.2.4

OR

bigswitch big_monitoring_fabricRange6.3–6.3.9

OR

bigswitch big_monitoring_fabricRange7.0–7.0.3

OR

bigswitch big_monitoring_fabricRange7.1–7.1.4

OR

bigswitch multi-cloud_directorRange<1.1.0

Source	Link
know	www.know.bishopfox.com/advisories/big-monitoring-fabric
know	www.know.bishopfox.com/advisories

21 Nov 2024 04:35Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.16.1

EPSS0.01437

big switch big monitoring fabric big cloud fabric multi-cloud director xss unauthenticated attacker javascript injection