CVE-2019-7417

XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Active Library Explorer (Ericsson)

References

• http://packetstormsecurity.com/files/151583/Ericsson-Active-Library-Explorer-ALEX-14.3-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2019/Feb/27
• http://www.ericsson.com