Lucene search

CVE-2019-17495

🗓️ 10 Oct 2019 22:10:15Reported by GoogleType

osv🔗 osv.dev👁 13 Views

A CSS injection vulnerability in Swagger UI. Allows RPO technique for CSS-based input exfiltratio

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ InstaScan (CVE-2019-17495)	10 Jul 202014:19	–	ibm
IBM Security Bulletins	Security Bulletin: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495)	20 Jan 202018:11	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to CSS injection due to Swagger CVE-2019-17495	31 Jan 202310:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2019-17495)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to an IBM WebSphere Application Server Liberty vulnerability (CVE-2019-17495)	10 May 202017:38	–	ibm
IBM Security Bulletins	Security Bulletin: Novalink is impacted by Swagger vulnerability affects WebSphere Application Server Liberty	27 Jul 202019:39	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ (CVE-2019-17495)	11 Jul 202013:19	–	ibm
IBM Security Bulletins	Security Bulletin: Swagger Vulnerability in WebSphere Application Server Liberty shipped with Cloud Pak System (CVE-2019-17495)	7 Jul 202013:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2019-17495)	19 Mar 202019:26	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Swagger UI (CVE-2019-17495)	30 Dec 201916:34	–	ibm

Source	Link
github	www.github.com/tarantula-team/CSS-injection-in-Swagger-UI
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
github	www.github.com/swagger-api/swagger-ui/releases/tag/v3.23.11
lists	www.lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r3acb7e494cf1aab99b6784b7c5bbddfd0d4f8a484ab534c3a61ef9cf%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r84b327f7a8b6b28857b906c07a66dd98e1d341191fa8d7816514ef96%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r853ffeb915a400f899de78124d4e0d77a19379d2e11bf8f4e98c624f%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/ref70b940c4f69560d29d6ba792d6c82865e74de3dcad4c92d99b1f8f%40%3Ccommits.airflow.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Oct 2019 22:15Current

9.4High risk

Vulners AI Score9.4

EPSS0.022