Security Advisory

CVE-2019-9508

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-30 20:50:26
Last updated 2024-09-17 01:41:38
Assigner certcc
State PUBLISHED

Description

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page.