4 matches found
CVE-2019-16955
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
5.4CVSS5.8AI score0.01656EPSS
SaveExploits1References1
CVE-2019-16955
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
5.4CVSS5.3AI score0.01656EPSS
SaveExploits1References3
CVE-2019-16955
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
5.3AI score0.01656EPSS
SaveExploits1References3
CVE-2019-16955
CVE-2019-16955 affects SolarWinds Web Help Desk 12.7.0 and is a cross-site scripting (XSS) vulnerability triggered by an uploaded SVG document in a request. The root cause is improper handling of SVG uploads leading to script injection. Public documents (NVD, Red Hat, CNVD) confirm the issue; no ...
5.4CVSS5.2AI score0.01656EPSS
SaveExploits1References3Affected Software1
20