VDB
GCVE-110-CERTCC-2019-944837
GCVE-110-CERTCC-2019-944837
Advisory PublishedCVSS 8.5/10
The Vertiv Avocent Universal Management Gateway Model UMG-4000 is a data center management appliance. The web interface of the UMG-4000 is vulnerable to command injection, stored cross-site scripting (XSS), and reflected XSS, which may allow an authenticated attacker with administrative privileges to remotely execute arbitrary code.
Risk Scores
CVSS 2.0
8.5/10
High · AV:N/AC:M/Au:S/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.7remediation_levelOFreport_confidenceCenvironmental_score6.6600201024target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND
References
Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities
url
Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities
url
Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities
url
Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities
url
Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities
url
Browse GCVE Records
73,161 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.