Lucene search
Redhat.comRH:CVE-2019-10178HistoryFeb 05, 2020 - 9:14 a.m.
CVE-2019-10178
2020-02-0509:14:18
redhat.com
access.redhat.com
15
0.001 Low
EPSS
Percentile
35.9%
It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the “Activity” page, enabling a Stored Cross Site Scripting (XSS) vulnerability. An unauthenticated attacker could trick an authenticated victim into creating a specially crafted activity, which would execute arbitrary JavaScript code when viewed in a browser.
Related
debiancve
debiancve
CVE-2019-10178
2020-03-18 16:15:11
nvd
nvd
CVE-2019-10178
2020-03-18 16:15:11
prion
prion
Cross site scripting
2020-03-18 16:15:00
ubuntucve
ubuntucve
CVE-2019-10178
2020-03-18 00:00:00
cve
cve
CVE-2019-10178
2020-03-18 16:15:11
veracode
veracode
Cross-site Scripting (XSS)
2021-03-23 10:25:52
cvelist
cvelist
CVE-2019-10178
2020-03-18 14:57:08
redhat
redhat
nessus
nessus
RHEL 7 : pki-core and redhat-pki-theme (RHSA-2021:0947)
2024-04-27 00:00:00
oraclelinux
oraclelinux
pki-core security and bug fix update
2021-03-17 00:00:00