CVE-2019-11649

Опубликовано: 19 июн. 2019

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploited to execute JavaScript code in user’s browser.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:fortify_software_security_center:17.20:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:fortify_software_security_center:18.10:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:fortify_software_security_center:18.20:*:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00172

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-7wf8-w9j2-wgwq

github

больше 3 лет назад

Cross-site scripting in Micro Focus Fortify software security center server, version 18.1, 18.2. The vulnerability may allow remote code execution.