CVE-2019-3490

A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript…

published May 2, 2019

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01019 · 63.0th percentile
Published
2019-05-02T16:46Z
EPSS history
Timeline
  • 02 MAY 16:46Z
    A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript…
    cvelistv5