Back to search
CVE-2019-3490
Published: May 2, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.
| Vendor | Product | Versions |
|---|---|---|
OES | Netstorage component of Open Enterprise Server | affected OES2015SP1affected OES2018affected and OES2018SP1 |
References
https://support.microfocus.com/kb/doc.php?id=7023828
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now