Vulnetix
Try Vulnetix Request Demo
CVE-2019-19336 PUBLISHED CVSS 5.400000095367432 MEDIUM

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.

EPSS 0.31% · 53.7th percentile

Risk Scores

CVSS v3.0
5.400000095367432
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS Score
0.31%
53.7th percentile

Affected Products

VendorProductVersions
redhatvirtualization4.3
ovirtovirt-engine0
Red Hatovirt-engine4.3.8

Timeline

References

Open in Interactive Console →