CVE-2019-9591: XSS
Published Mar 6, 2019
·Updated
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.
Affected Software
1 affected component
Mitel Connect ONSITE<19.49.1500.0
Event History
Mar 6, 2019
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9591?
The severity of CVE-2019-9591 is classified as medium due to its potential impact on user sessions and data integrity.
2
How can I fix CVE-2019-9591?
To fix CVE-2019-9591, upgrade ShoreTel Connect ONSITE to version 19.49.1500.0 or later.
3
Who is affected by CVE-2019-9591?
CVE-2019-9591 affects users of ShoreTel Connect ONSITE versions prior to 19.49.1500.0.
4
What type of vulnerability is CVE-2019-9591?
CVE-2019-9591 is a reflected Cross-site Scripting (XSS) vulnerability.
5
What can attackers achieve with CVE-2019-9591?
Attackers exploiting CVE-2019-9591 can inject arbitrary web scripts or HTML, potentially compromising user sessions.