CVE-2019-18649 - When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS

MEDIUM

When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS

Published Nov 14, 2019

4.8

MEDIUM

CVSS 3.1

EPSS 0.52%

When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 14, 2019

Updated Aug 5, 2024

Reserved Oct 30, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a