CVE-2019-9592: XSS

Published Mar 6, 2019

Updated

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Affected Software

1 affected component

Mitel Connect ONSITE=19.45.1602.0

Event History

Mar 6, 2019

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-9592?

CVE-2019-9592 is classified as a medium severity vulnerability due to its potential impact on user data integrity.

How do I fix CVE-2019-9592?

To fix CVE-2019-9592, update ShoreTel Connect ONSITE to the latest version that addresses this reflected XSS vulnerability.

What does CVE-2019-9592 affect?

CVE-2019-9592 affects the ShoreTel Connect ONSITE version 19.45.1602.0 and allows for remote script injection.

Can CVE-2019-9592 be exploited remotely?

Yes, CVE-2019-9592 can be exploited remotely by attackers injecting malicious scripts through the url parameter.

What are the risks associated with CVE-2019-9592?

The main risks associated with CVE-2019-9592 include unauthorized access to user sessions and potential data theft.