CVE-2019-3776CWE-79

Reflected XSS in Pivotal Operations Manager

High · published March 7, 2019

CVSS v3.0
7.2
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2019-03-07T19:00Z
EPSS history
Timeline
  • 07 MAR 19:00Z
    Reflected XSS in Pivotal Operations Manager
    cvelistv5