CVE-2019-3709

Cross-Site Scripting Vulnerability while registering vCenter servers

High · published April 17, 2019

CVSS v3.0
8.3
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while registering vCenter servers. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

The record
Technical detail
CVSS v3.0
8.3 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02249 · 82.8th percentile
Published
2019-04-17T13:32Z
EPSS history
Timeline
  • 17 APR 13:32Z
    Cross-Site Scripting Vulnerability while registering vCenter servers
    cvelistv5