CVE-2019-19294CWE-79

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)

Medium · published March 10, 2020

CVSS v3.1
6.3
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains

multiple stored Cross-site Scripting (XSS) vulnerabilities in several input

fields.

This could allow an authenticated remote attacker to inject malicious

JavaScript code into the CCS web application that is later executed

in the browser context of any other user who views the relevant CCS

web content.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01010 · 62.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-03-10T19:16Z
EPSS history
Timeline
  • 10 MAR 19:16Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)
    cvelistv5