CVE-2019-14974: XSS
Published Aug 14, 2019
·Updated
SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktopurl= XSS.
Affected Software
1 affected component
SugarCRM SugarCRM=9.0.0
Event History
Aug 14, 2019
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this SugarCRM vulnerability?
The vulnerability ID for this SugarCRM vulnerability is CVE-2019-14974.
2
What is the title of this vulnerability?
The title of this vulnerability is 'SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS.'
3
What is the severity of CVE-2019-14974?
The severity of CVE-2019-14974 is medium.
4
How can this vulnerability be exploited?
This vulnerability can be exploited by injecting malicious code into the mobile/error-not-supported-platform.html?desktop_url= parameter.
5
Is there a fix available for this vulnerability?
There may be a fix available for this vulnerability. It is recommended to check with the vendor for any available patches or updates.