Lucene search

[email protected]CVE-2019-18926

HistoryNov 12, 2019 - 5:15 p.m.

CVE-2019-18926

2019-11-1217:15:10

CWE-79

[email protected]

web.nvd.nist.gov

cve-2019-18926

systematic iris standards management

ism

cross site scripting

xss

web security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.8%

JSON

Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the web page, allowing a malicious user to conduct a Cross Site Scripting attack against users of the application.

Affected configurations

NVD

Node

systematicinciris_standards_managementMatch2.1sp1

VendorProductVersionCPE
systematicinciris_standards_management2.1cpe:/a:systematicinc:iris_standards_management:2.1:sp1::

Vendor	Product	Version	CPE
systematicinc	iris_standards_management	2.1	cpe:/a:systematicinc:iris_standards_management:2.1:sp1::

References

github.com/vulnerabilities-cve/vulnerabilities

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.8%

JSON

Related for CVE-2019-18926

prion1 nvd1 cvelist1