CVE-2019-19547: XSS
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19547?
CVE-2019-19547 is a vulnerability in Symantec Endpoint Detection and Response (SEDR) prior to version 4.3.0.
What is the severity of CVE-2019-19547?
CVE-2019-19547 has a severity rating of medium.
How does CVE-2019-19547 affect Symantec Endpoint Detection and Response?
CVE-2019-19547 affects Symantec Endpoint Detection and Response versions prior to 4.3.0, making them susceptible to a cross-site scripting (XSS) issue.
What is cross-site scripting (XSS)?
Cross-site scripting (XSS) is a type of vulnerability that allows attackers to inject client-side scripts into web pages viewed by other users.
How can an XSS vulnerability be used by attackers?
Attackers can use an XSS vulnerability to potentially execute malicious scripts on the victims' browsers and steal sensitive information or perform unauthorized actions.