Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19337 State: PUBLISHED Published: 2019-12-23T16:18:04 Last Updated: 2024-08-05T02:16:46.979Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Ceph Storage Problem Types: CWE-20 Description: A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19337
CVE ID: CVE-2019-19338 State: PUBLISHED Published: 2020-07-13T16:04:00 Last Updated: 2024-08-05T02:16:46.895Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: Linux Kernel Problem Types: CWE-385, CWE-203 Description: A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But w
ed by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/12/10/3 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19338 - https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-s
g.cgi?id=CVE-2019-19338 - https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort
CVE ID: CVE-2019-19339 State: PUBLISHED Published: 2020-01-17T18:08:53 Last Updated: 2024-08-05T02:16:46.826Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Red Hat Products: kpatch: Problem Types: CWE-805 Description: It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor, resulting in a severe DoS scenario by
may use this flaw to induce a hardware Machine Check Error on the host processor, resulting in a severe DoS scenario by halting the processor. System software like OS OR Virtual Machine Monitor (VMM) use virtual memory system for storing program instructions and data in memory. Virtual Memory system uses Paging structures like Page Tables and Page Directories to manage system memory. The processor's Memory Management Unit (MMU) uses Paging structure entries to translate program's virtual memory addresses to physical memory addresses. The processor stores these address translations into its local cache buffer called - Translation Lookaside Buffer (TLB). TLB has two parts, one for instructions
lations into its local cache buffer called - Translation Lookaside Buffer (TLB). TLB has two parts, one for instructions and other for data addresses. System software can modify its Paging structure entries to change address mappings OR certain attributes like page size etc. Upon such Paging structure alterations in memory, system software must invalidate the corresponding address translations in the processor's TLB cache. But before this TLB invalidation takes place, a privileged guest user may trigger an instruction fetch operation, which could use an already cached, but now invalid, virtual to physical address translation from Instruction TLB (ITLB). Thus accessing an invalid physical mem
now invalid, virtual to physical address translation from Instruction TLB (ITLB). Thus accessing an invalid physical memory address and resulting in halting the processor due to the Machine Check Error (MCE) on Page Size Change. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19339
CVE ID: CVE-2019-19340 State: PUBLISHED Published: 2019-12-19T20:16:46 Last Updated: 2024-08-05T02:16:46.967Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Red Hat Products: Tower Problem Types: CWE-1188 Description: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug
ess to the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19340
CVE ID: CVE-2019-19341 State: PUBLISHED Published: 2019-12-19T20:24:18 Last Updated: 2024-08-05T02:16:46.897Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: RedHat Products: Tower Problem Types: CWE-732 Description: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the SECRET_KEY and the database backup. Any user with access to the Tower server, and knowledge of when a backup is run, could retrieve every credential stored in Tower. Access to data is the highest threat with this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - htt
data is the highest threat with this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19341
CVE ID: CVE-2019-19342 State: PUBLISHED Published: 2019-12-19T20:20:01 Last Updated: 2024-08-05T02:16:47.010Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Tower Problem Types: CWE-209 Description: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '#' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password. Additional Analyst Notes: - CVE Program
cker could easily guess some predictable passwords or brute force the password. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19342
CVE ID: CVE-2019-19343 State: PUBLISHED Published: 2021-03-23T20:23:20 Last Updated: 2024-08-05T02:16:46.887Z Vendors: n/a Products: Undertow Problem Types: CWE-400 Description: A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1780445 - https://issues.redhat.com/browse/JBEAP-16695 - https://security.netapp.com/advisory/ntap-20
om/show_bug.cgi?id=1780445 - https://issues.redhat.com/browse/JBEAP-16695 - https://security.netapp.com/advisory/ntap-20220211-0002/
CVE ID: CVE-2019-19344 State: PUBLISHED Published: 2020-01-21T00:00:00 Last Updated: 2024-08-05T02:16:47.118Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: samba Problem Types: CWE-416 Description: There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19344 - https://www.samba.org/samba/security/CVE-2019-19344.html -
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19344 - https://www.samba.org/samba/security/CVE-2019-19344.html - https://security.netapp.com/advisory/ntap-20200122-0001/ - https://www.synology.com/security/advisory/Synology_SA_20_01 - https://usn.ubuntu.com/4244-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ - https://security.gentoo.org/glsa/202003-52 - https://lists.debian.org/debian-lts-
ge/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ - https://security.gentoo.org/glsa/202003-52 - https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
CVE ID: CVE-2019-19345 State: PUBLISHED Published: 2020-03-20T14:00:33 Last Updated: 2024-08-05T02:16:47.043Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: openshift/mediawiki-apb Problem Types: CWE-266 Description: A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=
rivileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19345
CVE ID: CVE-2019-19346 State: PUBLISHED Published: 2020-04-02T19:12:29 Last Updated: 2024-08-05T02:16:47.011Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Openshift Enterprise Products: openshift/mariadb-apb Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-201
es. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19346
CVE ID: CVE-2019-19347 State: REJECTED Published: 2020-03-24T21:00:52 Last Updated: 2020-03-24T21:00:52 Description: No description available.
CVE ID: CVE-2019-19348 State: PUBLISHED Published: 2020-04-02T19:14:08 Last Updated: 2024-08-05T02:16:46.972Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Openshift Enterprise Products: openshift/apb-base Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19348
CVE ID: CVE-2019-19349 State: PUBLISHED Published: 2021-03-24T15:32:35 Last Updated: 2024-08-05T02:16:47.170Z Vendors: n/a Products: operator-framework/operator-metering Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1793284 - https://bugzilla.redhat.com/show_bug.cgi?id=1791534
CVE ID: CVE-2019-19350 State: PUBLISHED Published: 2021-03-24T15:36:09 Last Updated: 2024-08-05T02:16:47.049Z Vendors: n/a Products: openshift/ansible-service-broker Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1791534 - https://bugzilla.redhat.com/show_bug.cgi?id=1793283
CVE ID: CVE-2019-19351 State: PUBLISHED Published: 2020-03-18T16:33:50 Last Updated: 2024-08-05T02:16:47.395Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: openshift Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-20
.11. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351
CVE ID: CVE-2019-19352 State: PUBLISHED Published: 2021-03-24T16:02:59 Last Updated: 2024-08-05T02:16:46.802Z Vendors: n/a Products: operator-framework/presto Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1791534 - https://bugzilla.redhat.com/show_bug.cgi?id=1793281
CVE ID: CVE-2019-19353 State: PUBLISHED Published: 2021-03-24T16:07:14 Last Updated: 2024-08-05T02:16:47.162Z Vendors: n/a Products: operator-framework/hive Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1791534 - https://bugzilla.redhat.com/show_bug.cgi?id=1793279 - https://access.redhat.com/articles/4859371
CVE ID: CVE-2019-19354 State: PUBLISHED Published: 2021-03-24T16:19:47 Last Updated: 2024-08-05T02:16:47.124Z Vendors: n/a Products: operator-framework/hadoop Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1791534 - https://access.redhat.com/articles/4859371 - https://bugzilla.redhat.com/show_bug.cgi?id=1793278
CVE ID: CVE-2019-19355 State: PUBLISHED Published: 2020-03-18T16:35:00 Last Updated: 2024-08-05T02:16:47.078Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: openshift Problem Types: CWE-266 Description: An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as shipped in Openshift 4. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19355
CVE ID: CVE-2019-19356 State: PUBLISHED Published: 2020-02-07T22:49:07.000Z Last Updated: 2025-10-21T23:35:51.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.digital.security/en/blog/netis-routers-remote-code-executio
ontainer: - CISA ADP Vulnrichment: References: - https://www.digital.security/en/blog/netis-routers-remote-code-execution-cve-2019-19356 - https://github.com/shadowgatt/CVE-2019-19356 - http://packetstormsecurity.com/files/156588/Netis-WF2419-2.2.36123-Remote-Code-Execution.html
CVE ID: CVE-2019-19362 State: PUBLISHED Published: 2019-12-02T02:52:34 Last Updated: 2024-08-05T02:16:46.977Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:P/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history (but does not exit the application), this data is not wiped from main memory, and therefore could be read by a local user with the same or greater privileges. Additional Analyst Not
rom main memory, and therefore could be read by a local user with the same or greater privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nestedif.com/teamviewer-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory/
CVE ID: CVE-2019-19363 State: PUBLISHED Published: 2020-01-24T17:12:18 Last Updated: 2024-08-05T02:16:47.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version Additional Analyst Notes: - CVE Prog
- All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.com/info/2020/0122_1/ - http://seclists.org/fulldisclosure/2020/Jan/34 - http://packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.html - http://packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.html - http://jvn.jp/en/jp/JVN15697526/index.html
CVE ID: CVE-2019-19364 State: PUBLISHED Published: 2019-12-04T18:42:20 Last Updated: 2024-08-05T02:16:47.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current directory; by doing so, an attacker can quickly escalate its privileges. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Eli-Paz/482b514320009f3e76ea712cde3bc350
CVE ID: CVE-2019-19366 State: PUBLISHED Published: 2019-11-27T19:19:34 Last Updated: 2024-08-05T02:16:47.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/94183b11bdfe579fd860a37e74cd3a8e - https://github.com/fusionpbx/fusionpbx/commit/f3047c83f3022a4780dca95ed7bccbf3a6fa868e
CVE ID: CVE-2019-19367 State: PUBLISHED Published: 2019-11-27T19:19:24 Last Updated: 2024-08-05T02:16:47.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/94183b11bdfe579fd860a37e74cd3a8e - https://github.com/fusionpbx/fusionpbx/commit/72a5ce4d2d6bc0ec0e72bbfb76487e4761f292c5
CVE ID: CVE-2019-19368 State: PUBLISHED Published: 2019-12-16T15:55:02 Last Updated: 2024-08-05T02:16:47.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts Additional Analyst Notes: - CVE Program Container: References: - https://www.maxum.com/Rumpus/Download.html - https://github.com/harshit-shukla/CVE-2019-19368/ - http://packetstormsecurity.com/files/155719/Rumpus-FTP-Web-File-Manager-8.2.9.1-Cross-Site-Scripting.html
CVE ID: CVE-2019-19370 State: PUBLISHED Published: 2020-03-02T17:54:00 Last Updated: 2024-08-05T02:16:47.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel MiCollab application before 9.0.15 for Android could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the file upload interface. A successful exploit could allow an attacker to execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advis
ontainer: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0008
CVE ID: CVE-2019-19371 State: PUBLISHED Published: 2020-03-02T17:55:01 Last Updated: 2024-08-05T02:16:46.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-se
- https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007