Lucene search

K
cve[email protected]CVE-2019-1357
HistoryOct 10, 2019 - 2:15 p.m.

CVE-2019-1357

2019-10-1014:15:17
CWE-290
web.nvd.nist.gov
68
microsoft
browser
spoofing
vulnerability
cve-2019-1357
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%

A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka ‘Microsoft Browser Spoofing Vulnerability’. This CVE ID is unique from CVE-2019-0608.

Affected configurations

Vulners
NVD
Node
microsoftinternet_explorer_11MatchWindows 7 for 32-bit Systems Service Pack 1
OR
microsoftinternet_explorer_11MatchWindows 7 for x64-based Systems Service Pack 1
OR
microsoftinternet_explorer_11MatchWindows Server 2008 R2 for x64-based Systems Service Pack 1
OR
microsoftinternet_explorer_11MatchWindows 8.1 for 32-bit systems
OR
microsoftinternet_explorer_11MatchWindows 8.1 for x64-based systems
OR
microsoftinternet_explorer_11MatchWindows Server 2012 R2
OR
microsoftinternet_explorer_11MatchWindows RT 8.1
OR
microsoftinternet_explorer_11MatchWindows 10 for 32-bit Systems
OR
microsoftinternet_explorer_11MatchWindows 10 for x64-based Systems
OR
microsoftinternet_explorer_11MatchWindows Server 2016
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1607 for 32-bit Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1607 for x64-based Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1703 for 32-bit Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1703 for x64-based Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1709 for 32-bit Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1709 for x64-based Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1803 for 32-bit Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1803 for x64-based Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1803 for ARM64-based Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1809 for 32-bit Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1809 for x64-based Systems
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1809 for ARM64-based Systems
OR
microsoftinternet_explorer_11MatchWindows Server 2019
OR
microsoftinternet_explorer_11MatchWindows 10 Version 1709 for ARM64-based Systems
OR
microsoftwindows_server_2012
OR
microsoftinternet_explorer_11_on_windows_10_1903 for 32-bit systemsMatchunspecified
OR
microsoftinternet_explorer_11_on_windows_10_1903 for x64-based systemsMatchunspecified
OR
microsoftinternet_explorer_11_on_windows_10_1903 for arm64-based systemsMatchunspecified
OR
microsoftinternet_explorer_10MatchWindows Server 2012
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
OR
microsoftedgeMatchunspecified
VendorProductVersionCPE
microsoftinternet_explorer_11Windows 7 for 32-bit Systems Service Pack 1cpe:2.3:a:microsoft:internet_explorer_11:Windows 7 for 32-bit Systems Service Pack 1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 7 for x64-based Systems Service Pack 1cpe:2.3:a:microsoft:internet_explorer_11:Windows 7 for x64-based Systems Service Pack 1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows Server 2008 R2 for x64-based Systems Service Pack 1cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2008 R2 for x64-based Systems Service Pack 1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 8.1 for 32-bit systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 8.1 for 32-bit systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 8.1 for x64-based systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 8.1 for x64-based systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows Server 2012 R2cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2012 R2:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows RT 8.1cpe:2.3:a:microsoft:internet_explorer_11:Windows RT 8.1:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 10 for 32-bit Systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 10 for 32-bit Systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows 10 for x64-based Systemscpe:2.3:a:microsoft:internet_explorer_11:Windows 10 for x64-based Systems:*:*:*:*:*:*:*
microsoftinternet_explorer_11Windows Server 2016cpe:2.3:a:microsoft:internet_explorer_11:Windows Server 2016:*:*:*:*:*:*:*
Rows per page:
1-10 of 391

CNA Affected

[
  {
    "product": "Internet Explorer 11",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for 32-bit systems"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for x64-based systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2"
      },
      {
        "status": "affected",
        "version": "Windows RT 8.1"
      },
      {
        "status": "affected",
        "version": "Windows 10 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2016"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2019"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for ARM64-based Systems"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows Server 2012",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Internet Explorer 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Server 2012"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows Server 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%