← volver
CVE-2018-19439

CVE-2018-19439

EPSS 20.5%
Vexday Risk Score
23Bajo
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
Madurez del exploit
Exploit funcional
Exploit automatizable disponible (Nuclei/Metasploit).
CVSS —EPSS 20.5%KEV nãoPoC —Nuclei simMetasploit —Patch —
Ciclo de vida
13 dic 2018Publicada en NVD
Recomendación: Planificar corrección próxima — ya existe PoC pública.
XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4). helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/com_sun_web_ui/help/helpwindow.jsp windowTitle parameter.
Productos afectados
n/a · n/a
Referencias
http://packetstormsecurity.com/files/150444/Oracle-Secure-Global-Desktop-Administration-Console-4.4-Cross-Site-Scripting.htmlhttp://seclists.org/fulldisclosure/2018/Nov/58http://www.securityfocus.com/bid/106006