1. Home
  2. CVE Database
  3. CVE-2019-19390
MEDIUM · 5.4

CVE-2019-19390

The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues.

Vulnerability Description

The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Matrix42Workspace Management<= 9.1.2.2765

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2019-19390?

CVE-2019-19390 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues.

How severe is CVE-2019-19390?

CVE-2019-19390 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-19390?

Check the references section above for vendor advisories and patch information. Affected products include: Matrix42 Workspace Management.