Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Microfocus Subscribe
Filtered by product Open Enterprise Server
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-3490 1 Microfocus 1 Open Enterprise Server 2019-05-06 4.3 MEDIUM 6.1 MEDIUM
A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.