CVE-2019-19865 - Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS

Back Back to CVE browser

MEDIUM

Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS

Published Feb 21, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.65%

Description

Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9458
Advisory
https://networks.unify.com/security/advisories/OBSO-2002-01.pdf
x_refsource_MISCVendor Advisory
https://unify.com/en/support/security-advisories
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9458		Advisory
https://networks.unify.com/security/advisories/OBSO-2002-01.pdf		x_refsource_MISCVendor Advisory
https://unify.com/en/support/security-advisories		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 21, 2020

Updated Aug 5, 2024

Reserved Dec 17, 2019

Link CVE-2019-19865

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19865

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 21, 2020

Updated Aug 5, 2024

Link EUVD-2019-9458

GitHub

No data