CVE-2019-18648 - When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields

MEDIUM

When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields

Published Nov 14, 2019

4.8

MEDIUM

CVSS 3.1

EPSS 0.52%

When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8367		Advisory
https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 14, 2019

Updated Aug 5, 2024

Reserved Oct 30, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Nov 14, 2019

Updated Aug 5, 2024

Exploited since n/a