CVE-2019-1273

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka…

published September 11, 2019

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01548 · 74.8th percentile
Published
2019-09-11T21:25Z
EPSS history
Timeline
  • 11 SEP 21:25Z
    A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka…
    cvelistv5