CVE-2019-16104

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN is affected by CVE-2019-16104. A reflected cross-site scripting (XSS) vulnerability exists in versions prior to 8.1.7.x, exploitable via the rest/json/configdb/download/ PATH_INFO exposed by the device. The issue is confirmed across multiple sources (CNVD, Red Hat/R...