CVE-2019-5988 - Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page

Back Back to CVE browser

MEDIUM

Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page

Published Jan 6, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.80%

Description

Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page.

Affected products

Vendor ANGLERSNET Co,.Ltd. Product Access analysis CGI An-Analyzer Default
n/a
- Version
  released in 2019 June 24 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ANGLERSNET Co,.Ltd.

Access analysis CGI An-Analyzer

n/a

Version	Status	Constraints
released in 2019 June 24 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://jvn.jp/en/jp/JVN37230341/index.html
x_refsource_MISCThird Party Advisory
https://www.anglers-net.com/anlog/update/index.html
x_refsource_MISCExploitVendor Advisory

Link	Providers	Tags
https://jvn.jp/en/jp/JVN37230341/index.html		x_refsource_MISCThird Party Advisory
https://www.anglers-net.com/anlog/update/index.html		x_refsource_MISCExploitVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Jan 6, 2020

Updated Aug 4, 2024

Reserved Jan 10, 2019

Link CVE-2019-5988

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5988

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5988