Lucene search
Redhat.comRH:CVE-2019-19336HistoryJan 13, 2020 - 7:09 a.m.
CVE-2019-19336
2020-01-1307:09:00
redhat.com
access.redhat.com
17
0.001 Low
EPSS
Percentile
34.0%
A cross-site scripting vulnerability was reported in the oVirt-engine’s OAuth authorization endpoint. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user’s oVirt session.
Related
nvd
nvd
CVE-2019-19336
2020-03-19 14:15:11
redhat
redhat
osv
osv
CVE-2019-19336
2020-03-19 14:15:11
cvelist
cvelist
CVE-2019-19336
2020-03-19 13:11:16
veracode
veracode
Cross-site Scripting (XSS)
2020-02-14 00:29:59
prion
prion
Cross site scripting
2020-03-19 14:15:00
cve
cve
CVE-2019-19336
2020-03-19 14:15:11
symantec
symantec
oVirt Engine CVE-2019-19336 Cross Site Scripting Vulnerability
2020-01-11 00:00:00
nessus
nessus
RHEL 7 : Red Hat Virtualization Engine (RHSA-2020:0498)
2020-02-18 00:00:00