Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for open_enterprise_server by microfocus

    CVE-2019-3490 (GCVE-0-2019-3490)

    Vulnerability from nvd – Published: 2019-05-02 16:46 – Updated: 2024-08-04 19:12
    VLAI
    Summary
    A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.
    Severity
    No CVSS data available.
    CWE
    • DOM based XSS
    Assigner
    References
    Impacted products
    Vendor Product Version
    OES Netstorage component of Open Enterprise Server Affected: OES2015SP1
    Affected: OES2018
    Affected: and OES2018SP1
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:12:09.334Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.microfocus.com/kb/doc.php?id=7023828"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Netstorage component of Open Enterprise Server",
          "vendor": "OES",
          "versions": [
            {
              "status": "affected",
              "version": "OES2015SP1"
            },
            {
              "status": "affected",
              "version": "OES2018"
            },
            {
              "status": "affected",
              "version": "and OES2018SP1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DOM based XSS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:43.000Z",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.microfocus.com/kb/doc.php?id=7023828"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "ID": "CVE-2019-3490",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Netstorage component of Open Enterprise Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "OES2015SP1"
                          },
                          {
                            "version_value": "OES2018"
                          },
                          {
                            "version_value": "and OES2018SP1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "OES"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DOM based XSS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.microfocus.com/kb/doc.php?id=7023828",
              "refsource": "MISC",
              "url": "https://support.microfocus.com/kb/doc.php?id=7023828"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2019-3490",
    "datePublished": "2019-05-02T16:46:37.000Z",
    "dateReserved": "2018-12-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T19:12:09.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-3490 (GCVE-0-2019-3490)

    Vulnerability from cvelistv5 – Published: 2019-05-02 16:46 – Updated: 2024-08-04 19:12
    VLAI
    Summary
    A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.
    Severity
    No CVSS data available.
    CWE
    • DOM based XSS
    Assigner
    References
    Impacted products
    Vendor Product Version
    OES Netstorage component of Open Enterprise Server Affected: OES2015SP1
    Affected: OES2018
    Affected: and OES2018SP1
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:12:09.334Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.microfocus.com/kb/doc.php?id=7023828"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Netstorage component of Open Enterprise Server",
          "vendor": "OES",
          "versions": [
            {
              "status": "affected",
              "version": "OES2015SP1"
            },
            {
              "status": "affected",
              "version": "OES2018"
            },
            {
              "status": "affected",
              "version": "and OES2018SP1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DOM based XSS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:43.000Z",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.microfocus.com/kb/doc.php?id=7023828"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "ID": "CVE-2019-3490",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Netstorage component of Open Enterprise Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "OES2015SP1"
                          },
                          {
                            "version_value": "OES2018"
                          },
                          {
                            "version_value": "and OES2018SP1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "OES"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DOM based XSS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.microfocus.com/kb/doc.php?id=7023828",
              "refsource": "MISC",
              "url": "https://support.microfocus.com/kb/doc.php?id=7023828"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2019-3490",
    "datePublished": "2019-05-02T16:46:37.000Z",
    "dateReserved": "2018-12-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T19:12:09.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}