CVE-2019-3776

Reflected XSS in Pivotal Operations Manager

State: Published
Severity: 7.2 High
Published: Mar 7, 2019
Updated: Sep 17, 2024
Reserved: Jan 3, 2019

Description

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.

Scores

CVSS	Score	Vector	Source
3.0	7.2 High	CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L	dell

Weaknesses

CWE-79 Cross-site Scripting (XSS) - Reflected

Affected Products

Product	Versions
Pivotal Ops ManagerPivotal	2.2 to before 2.2.16Affected 2.3 to before 2.3.10Affected 2.4 to before 2.4.3Affected 2.1 to before 2.1.19Affected

References

107344vdb-entry
https://pivotal.io/security/cve-2019-3776

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.