CVE-2019-3776: Reflected XSS in Pivotal Operations Manager
Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3776?
CVE-2019-3776 is a reflected cross-site scripting vulnerability in Pivotal Operations Manager.
What is the severity of CVE-2019-3776?
The severity of CVE-2019-3776 is high with a CVSS score of 5.4.
How does CVE-2019-3776 affect Pivotal Operations Manager?
CVE-2019-3776 affects Pivotal Operations Manager versions 2.1.x to 2.4.3.
How can the reflected cross-site scripting vulnerability be exploited?
An attacker can exploit the reflected cross-site scripting vulnerability by convincing a user to interact with malicious content.
Are there any patches or updates available for CVE-2019-3776?
Yes, patches are available for the affected versions of Pivotal Operations Manager.