CVE-2019-1882
Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability
- State
- Published
- Severity
- 5.4 Medium
- Published
- Jun 5, 2019
- Updated
- Nov 21, 2024
- Reserved
- Dec 6, 2018
Description
A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to conduct XSS attacks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.4 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Industrial Network DirectorCisco |
|
References
- 20190605 Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerabilityvendor-advisory
- 108629vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.