CVE-2019-10227 - openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component · CoreCVE

Back Back to CVE browser

MEDIUM

openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component

Published Dec 31, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 1.23%

Description

openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2238
Advisory
https://openitcockpit.io/2019/05/21/openitcockpit-3-7-1-released/
x_refsource_CONFIRMRelease NotesVendor Advisory
https://openitcockpit.io/security/
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2238		Advisory
https://openitcockpit.io/2019/05/21/openitcockpit-3-7-1-released/		x_refsource_CONFIRMRelease NotesVendor Advisory
https://openitcockpit.io/security/		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 31, 2019

Updated Aug 4, 2024

Reserved Mar 27, 2019

Link CVE-2019-10227

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-10227

Severity n/a

Public date n/a

Links CVE-2019-10227

Assigner mitre

Published Dec 31, 2019

Updated Aug 4, 2024

Exploited since n/a

Link EUVD-2019-2238