CVE-2019-9508

Publication date

2020-03-30 20:50:26

Family

certcc

State

PUBLISHED

Description

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page.