CVE-2019-13564: XSS
First published: Thu Jul 11 2019(Updated: )
XSS exists in Ping Identity Agentless Integration Kit before 1.5.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pingidentity Agentless Integration Kit | <1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/154274/Ping-Identity-Agentless-Integration-Kit-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Aug/33
- https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190305-01_Ping_Identity_Agentless_Integration_Kit_Reflected_XSS
- https://support.pingidentity.com/s/document-item?bundleId=integrations&topicId=Integration_Kits%2FAgentless%2FagentlessIK_c_changelog.html
Frequently Asked Questions
What is the vulnerability ID for this XSS vulnerability in Ping Identity Agentless Integration Kit?
The vulnerability ID is CVE-2019-13564.
What is the severity of the CVE-2019-13564 vulnerability?
The severity of the CVE-2019-13564 vulnerability is medium with a CVSS score of 6.1.
What software versions are affected by the XSS vulnerability in Ping Identity Agentless Integration Kit?
The XSS vulnerability affects Ping Identity Agentless Integration Kit versions up to exclusive version 1.5.
How can I fix the XSS vulnerability in Ping Identity Agentless Integration Kit?
To fix the XSS vulnerability in Ping Identity Agentless Integration Kit, update to a version that is equal to or greater than 1.5.
Where can I find more information about the CVE-2019-13564 vulnerability?
You can find more information about the CVE-2019-13564 vulnerability in the following references: [Link 1](http://packetstormsecurity.com/files/154274/Ping-Identity-Agentless-Integration-Kit-Cross-Site-Scripting.html), [Link 2](http://seclists.org/fulldisclosure/2019/Aug/33), [Link 3](https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190305-01_Ping_Identity_Agentless_Integration_Kit_Reflected_XSS).
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/pingidentity
- canonical/pingidentity agentless integration kit