RHSA-2019:4069 | Vulnetix

RHSA-2019:4069 PUBLISHED CVSS 6.099999904632568 MEDIUM

Record from redhat · Published December 3, 2019

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

Risk scores

CVSS 3.0

6.099999904632568

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Vendor	Product	Versions
Red Hat	Red Hat Decision Manager 7

Timeline

Dec 3, 2019 CVE Published
Apr 30, 2026 Distribution Patch (2 in total, the first dated here)
May 14, 2026 CVE Updated
May 15, 2026 Security Advisory (3 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2019:4069
vulnetix vdb fixes RHSA-2019:4069

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2019%3A4069/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →