CVE-2019-19547

published 2020-01-13

CVE-2019-19547: Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
symantec	endpoint_detection_and_response	< 4.3.0	4.3.0
symantec	endpoint_detection_and_response	—	—

CWE-79