CVE-2019-3709 — Cross-Site Scripting Vulnerability while registering vCenter servers

CVE-2019-3709

Cross-Site Scripting Vulnerability while registering vCenter servers PUBLISHED

Description (CNA)

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while registering vCenter servers. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

Affected (CNA)

Vendor / product	Versions
Dell EMC / Dell EMC IsilonSD Management Server	affected 1.1.0

CWE

No CWE identifiers supplied.

References

https://seclists.org/fulldisclosure/2019/Apr/16

ADP enrichment

CVE

No English description supplied.

https://seclists.org/fulldisclosure/2019/Apr/16