CVE-2019-3413

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability

Medium · published June 11, 2019

CVSS v3.0
5.4
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00624 · 49.3th percentile
Published
2019-06-11T19:52Z
EPSS history
Timeline
  • 11 JUN 19:52Z
    All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability
    cvelistv5