Lucene search
PRIOn knowledge basePRION:CVE-2019-19336HistoryMar 19, 2020 - 2:15 p.m.
Cross site scripting
2020-03-1914:15:00
PRIOn knowledge base
www.prio-n.com
7
A cross-site scripting vulnerability was reported in the oVirt-engine’s OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user’s oVirt session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ovirt-engine | lt | 4.3.8 | |
| virtualization | eq | 4.3 |
Related
osv
osv
CVE-2019-19336
2020-03-19 14:15:11
nvd
nvd
CVE-2019-19336
2020-03-19 14:15:11
redhat
redhat
cvelist
cvelist
CVE-2019-19336
2020-03-19 13:11:16
veracode
veracode
Cross-site Scripting (XSS)
2020-02-14 00:29:59
cve
cve
CVE-2019-19336
2020-03-19 14:15:11
symantec
symantec
oVirt Engine CVE-2019-19336 Cross Site Scripting Vulnerability
2020-01-11 00:00:00
nessus
nessus
RHEL 7 : Red Hat Virtualization Engine (RHSA-2020:0498)
2020-02-18 00:00:00
redhatcve
redhatcve
CVE-2019-19336
2020-01-13 07:09:00