PT-2020-9979
CVE-2019-18652
·
Published
2020-01-07
·
Updated
2020-01-12
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
WatchGuard XMT515 versions prior to 12.1.3
Description:
A DOM based XSS issue allows a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The issue was tested in Microsoft Internet Explorer 11.418.18362.0 and Microsoft Edge 44.18362.387.0.
Recommendations:
For WatchGuard XMT515 versions prior to 12.1.3, at the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾