Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2019-11699
HistoryMay 21, 2019 - 12:00 a.m.

CVE-2019-11699

2019-05-2100:00:00
ubuntu.com
ubuntu.com
15

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

34.9%

JSON

A malicious page can briefly cause the wrong name to be highlighted as the
domain name in the addressbar during page navigations. This could result in
user confusion of which site is currently loaded for spoofing attacks. This
vulnerability affects Firefox < 67.

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchfirefox< 67.0+build2-0ubuntu0.18.04.1UNKNOWN
ubuntu18.10noarchfirefox< 67.0+build2-0ubuntu0.18.10.1UNKNOWN
ubuntu19.04noarchfirefox< 67.0+build2-0ubuntu0.19.04.1UNKNOWN
ubuntu19.10noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
ubuntu20.04noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
ubuntu20.10noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
ubuntu21.04noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
ubuntu21.10noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
ubuntu22.04noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
ubuntu22.10noarchfirefox< 67.0+build2-0ubuntu1UNKNOWN
Rows per page:
1-10 of 171

Related

prion 1
veracode 1
cvelist 1
nvd 1
cve 1
debiancve 1
ibm 1
nessus 7
openvas 6
archlinux 1
ubuntu 3
mozilla 1
kaspersky 1
freebsd 1
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
veracode
veracode
Content Spoofing
2020-09-21 06:19:32
cvelist
cvelist
CVE-2019-11699
2019-07-23 13:21:47
nvd
nvd
CVE-2019-11699
2019-07-23 14:15:14
cve
cve
CVE-2019-11699
2019-07-23 14:15:14
debiancve
debiancve
CVE-2019-11699
2019-07-23 14:15:14
ibm
ibm
Security Bulletin: Synthetic Playback Agent 8.1.4.x is affected by multiple vulnerabilities of Mozilla Firefox
2019-09-18 10:18:40
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Firefox regression (USN-3991-2)
2019-06-07 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 18.10 / 19.04 : Firefox vulnerabilities (USN-3991-1)
2019-05-22 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : Firefox regression (USN-3991-3)
2019-06-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3991-2)
2019-06-07 00:00:00
Mozilla Firefox Security Advisory (MFSA2019-13) - Linux
2021-11-08 00:00:00
Ubuntu: Security Advisory (USN-3991-1)
2019-05-22 00:00:00
archlinux
archlinux
[ASA-201905-9] firefox: multiple issues
2019-05-23 00:00:00
ubuntu
ubuntu
Firefox regression
2019-06-14 00:00:00
Firefox vulnerabilities
2019-05-21 00:00:00
Firefox regression
2019-06-06 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Firefox 67 — Mozilla
2019-05-21 00:00:00
kaspersky
kaspersky
KLA11486 Multiple vulnerabilities in Mozilla Firefox
2019-05-21 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2019-05-21 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

34.9%

JSON
Related for UB:CVE-2019-11699
prion1veracode1cvelist1nvd1cve1debiancve1ibm1nessus7openvas6archlinux1ubuntu3mozilla1kaspersky1freebsd1