← back
CVE-2019-6228

CVE-2019-6228

EPSS 0.8%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Mar 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.
Affected products
Apple · iOSApple · Safari
References
https://support.apple.com/HT209443https://support.apple.com/HT209449http://www.securityfocus.com/bid/106692