← CVE Intelligence

CVE-2019-1273

Microsoft / Windows PUBLISHED

Description (CNA)

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'.

Affected (CNA)

Vendor / productVersions
Microsoft / Windowsaffected 10 Version 1803 for 32-bit Systems; affected 10 Version 1803 for x64-based Systems; affected 10 Version 1803 for ARM64-based Systems; affected 10 Version 1809 for 32-bit Systems; affected 10 Version 1809 for x64-based Systems; affected 10 Version 1809 for ARM64-based Systems
Microsoft / Windows Serveraffected version 1803 (Core Installation); affected 2019; affected 2019 (Core installation)
Microsoft / Windows 10 Version 1903 for 32-bit Systemsaffected unspecified
Microsoft / Windows 10 Version 1903 for x64-based Systemsaffected unspecified
Microsoft / Windows 10 Version 1903 for ARM64-based Systemsaffected unspecified
Microsoft / Windows Server, version 1903 (Server Core installation)affected unspecified

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.