CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2019/12/30 12:15 a.m.•20 views

Design/Logic Flaw

On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...

4.3CVSS6AI score0.01436EPSS

SaveExploits1References3

CVE•added 2019/12/29 11:30 p.m.•121 views

CVE-2019-20070

CVE-2019-20070 affects Netis DL4323 devices. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the urlFQDN parameter of form2url.cgi (the Keyword field in URL Blocking Configuration). The root cause, as described in connected sources, is insufficient input validation in the d...

6.1CVSS6AI score0.01436EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2019/12/29 11:30 p.m.•40 views

CVE-2019-20070

On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...

6.1AI score0.01436EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2019/12/29 12:00 a.m.•1 views

CVE-2019-20070: Improper Neutralization of Input During Web Page Generation

On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...

6.1CVSS6.3AI score0.01436EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by