CVE-2019-3418
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS)
Medium · published August 15, 2019
What it is
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.
The record
Technical detail
- CVSS v3.0
- 5.7 · MEDIUM
- Vector
- CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00716 · 53.0th percentile
- Published
- 2019-08-15T14:44Z
EPSS history
Timeline