CVE-2019-17405: XSS
Published Nov 25, 2019
·Updated
Nokia IMPACT < 18A: has Reflected self XSS
Affected Software
1 affected component
Nokia IMPACT<18a
Event History
Nov 25, 2019
CVE Published
via MITRE·02:53 PM
Data Sourced
via MITRE·02:53 PM
Description
Frequently Asked Questions
1
What is CVE-2019-17405?
CVE-2019-17405 is a vulnerability in Nokia IMPACT < 18A that allows for reflected self cross-site scripting (XSS).
2
What is the severity of CVE-2019-17405?
The severity of CVE-2019-17405 is medium, with a CVSS score of 6.1.
3
How does CVE-2019-17405 affect Nokia IMPACT?
CVE-2019-17405 affects Nokia IMPACT versions prior to and including 18A.
4
What is the Common Weakness Enumeration (CWE) for CVE-2019-17405?
The Common Weakness Enumeration (CWE) for CVE-2019-17405 is CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
5
How can I mitigate CVE-2019-17405?
To mitigate CVE-2019-17405, it is recommended to upgrade to a version of Nokia IMPACT that is later than 18A.