CVE-2019-19547: XSS
First published: Mon Jan 13 2020(Updated: )
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Endpoint Detection And Response | <4.3.0 | |
| Fedoraproject Fedora | =30 | |
| Fedoraproject Fedora | =31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/
- https://support.symantec.com/us/en/article.SYMSA1502.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/
Frequently Asked Questions
What is CVE-2019-19547?
CVE-2019-19547 is a vulnerability in Symantec Endpoint Detection and Response (SEDR) prior to version 4.3.0.
What is the severity of CVE-2019-19547?
CVE-2019-19547 has a severity rating of medium.
How does CVE-2019-19547 affect Symantec Endpoint Detection and Response?
CVE-2019-19547 affects Symantec Endpoint Detection and Response versions prior to 4.3.0, making them susceptible to a cross-site scripting (XSS) issue.
What is cross-site scripting (XSS)?
Cross-site scripting (XSS) is a type of vulnerability that allows attackers to inject client-side scripts into web pages viewed by other users.
How can an XSS vulnerability be used by attackers?
Attackers can use an XSS vulnerability to potentially execute malicious scripts on the victims' browsers and steal sensitive information or perform unauthorized actions.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- vendor/symantec
- canonical/symantec endpoint detection and response
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/30
- version/fedoraproject fedora/31