ByteOS Network

NVD Vulnerability Details :

CVE-2019-10146

Modified

Source-secalert@redhat.com

Published At-18 Mar, 2020 | 15:15

Updated At-12 Feb, 2023 | 23:32

A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.7	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Secondary	3.0	4.7	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	2.6	LOW	AV:N/AC:H/Au:N/C:N/I:P/A:N