QwikSec

Security Database

CVE

CWE

Training

CVE-2019-19865

Published: Feb 21, 2020

Modified: Aug 5, 2024

PUBLISHED

Description

Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://unify.com/en/support/security-advisories

x_refsource_MISC

https://networks.unify.com/security/advisories/OBSO-2002-01.pdf

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.